2.2.2.4 AccessCheck Structure Version 3


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

0x01

0x00

0x00

0x00

cbNonce

Nonce (variable)

...

SID (variable)

...

Pad (variable)

...

Hash (64 bytes)

...

...

cbNonce (4 bytes): A 32-bit unsigned integer. It MUST be the length of Nonce, in bytes. This field is encoded using little-endian format.

Nonce (variable): This MUST contain an arbitrary binary value, as specified in section 3.2.4.1.

SID (variable): This MUST be a variable-length SID, marshaled in an RPC_SID structure ([MS-DTYP] section 2.4.2.3).

Pad (variable): This field MUST be 0 to 15 bytes long, such that the length of the AccessCheck structure is a multiple of 16 bytes.

Hash (64 bytes): This MUST be the SHA-512 hash [FIPS180-2] computed over all the preceding fields in the AccessCheck structure.