Hi !
I wonder what the PrincipalName.makeSalt() method is doing... It constructs a PrincipalName where the '/' and '@' are removed, and concatenated in reverse order, which does not make a lot of sense to me... Worst case : it is used to produce a salt for an encryption method, which is a bad idea, considering the salt is based on the principalName's content...
