RE: [cifs-protocol] Session keys are not always 16 bytes long

2009-02-27 Thread Hongwei Sun
: [cifs-protocol] Session keys are not always 16 bytes long On Tue, 2009-02-10 at 07:13 -0800, Hongwei Sun wrote: Andrew, I am sending you the new windows behavior notes that have been added to MS-SMB with respect to the length of session key used for SMB signing. 173 Section 3.1.5.1

RE: [cifs-protocol] Session keys are not always 16 bytes long

2009-02-27 Thread Andrew Bartlett
On Fri, 2009-02-27 at 09:22 -0800, Hongwei Sun wrote: Andrew, We finished updating the MS-SMB document as you suggested. (1) The following text is updated to describe how session keys are generally used for signing in Windows clients and servers in section 3.1.4.1 and 3.1.5.1.

RE: [cifs-protocol] Session keys are not always 16 bytes long

2009-01-27 Thread Hongwei Sun
: Sunday, November 30, 2008 8:53 PM To: Hongwei Sun Cc: Stefan (metze) Metzmacher Subject: RE: [cifs-protocol] Session keys are not always 16 bytes long On Tue, 2008-11-25 at 15:52 -0800, Hongwei Sun wrote: Andrew, As per our discussion during conference call, I would like to run testing

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-19 Thread Stefan (metze) Metzmacher
; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [cifs-protocol] Session keys are not always 16 bytes long Hongwei Sun schrieb: Metze/Andrew, The subkey in the EncAPRepPart of the AP-REP should be used as the session key when the mutual authentication is enabled(as described in RFC 4121

RE: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-18 Thread Hongwei Sun
-Original Message- From: Stefan (metze) Metzmacher [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 17, 2008 10:57 AM To: Hongwei Sun Cc: Andrew Bartlett; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [cifs-protocol] Session keys are not always 16 bytes long Hongwei Sun schrieb: Metze

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-17 Thread Stefan (metze) Metzmacher
when the correct session key is avaliable. metze -Original Message- From: Stefan (metze) Metzmacher [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2008 3:25 PM To: Hongwei Sun Cc: Andrew Bartlett; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [cifs-protocol] Session keys

RE: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-16 Thread Hongwei Sun
To: Hongwei Sun Cc: Andrew Bartlett; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [cifs-protocol] Session keys are not always 16 bytes long Hongwei Sun schrieb: Metze/Andrew, The subkey in the EncAPRepPart of the AP-REP should be used as the session key when the mutual authentication is enabled

RE: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-05 Thread Hongwei Sun
- From: Stefan (metze) Metzmacher [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 10:36 AM To: Hongwei Sun Cc: Andrew Bartlett; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [cifs-protocol] Session keys are not always 16 bytes long Hongwei Sun schrieb: Stefan, I just found

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-05 Thread Stefan (metze) Metzmacher
Hongwei Sun schrieb: Metze/Andrew, The subkey in the EncAPRepPart of the AP-REP should be used as the session key when the mutual authentication is enabled(as described in RFC 4121). When DES and RC4 are used in Kerberos, the implementation is based on RFC1964 (instead of RFC4121).

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-05 Thread Stefan (metze) Metzmacher
Andrew Bartlett schrieb: On Fri, 2008-09-05 at 22:25 +0200, Stefan (metze) Metzmacher wrote: Hongwei Sun schrieb: Metze/Andrew, The subkey in the EncAPRepPart of the AP-REP should be used as the session key when the mutual authentication is enabled(as described in RFC 4121).When DES

RE: [cifs-protocol] Session keys are not always 16 bytes long

2008-08-15 Thread Hongwei Sun
; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [cifs-protocol] Session keys are not always 16 bytes long Hongwei Sun schrieb: Stefan, I just found that the session key used to decrypt the password attributes in the DsGetNCChanges() is not truncated. Do you have network trace

RE: [cifs-protocol] Session keys are not always 16 bytes long

2008-08-08 Thread Hongwei Sun
- From: Stefan (metze) Metzmacher [mailto:[EMAIL PROTECTED] Sent: Friday, August 08, 2008 5:19 AM To: Andrew Bartlett Cc: Hongwei Sun; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [cifs-protocol] Session keys are not always 16 bytes long I just found that the session key used to decrypt

RE: [cifs-protocol] Session keys are not always 16 bytes long

2008-08-07 Thread Hongwei Sun
Hi, Andrew, In our last conference call, we talked about your question regarding which of the numerous keys Kerberos produce is considered the 'SMB session key'. I had discussions with the product team to find what or how should be documented. You mentioned that you would like to see