org.apache.directory.server.kerberos.sam

Interface KeyIntegrityChecker

All Known Implementing Classes:

TimestampChecker

public interface KeyIntegrityChecker

Checks the integrity of a kerberos key to decode-decrypt an encrypted generalized timestamp representing the pre-auth data.

Method Summary

Modifier and Type	Method and Description
boolean	checkKeyIntegrity(byte[] preauthData, javax.security.auth.kerberos.KerberosKey key) Checks the integrity of a KerberosKey to decrypt-decode and compare an encrypted encoded generalized timestamp representing the preauth data.

Method Detail

checkKeyIntegrity

boolean checkKeyIntegrity(byte[] preauthData,
                          javax.security.auth.kerberos.KerberosKey key)

Checks the integrity of a KerberosKey to decrypt-decode and compare an encrypted encoded generalized timestamp representing the preauth data.

Parameters:

preauthData - the generalized timestamp encrypted with client hotp generated KerberosKey

key - the KerberosKey generated from server side hotp value

Returns:

true if the key can decrypt-decode and make sense out of the timestamp verifying that it is in skew, false otherwise