2.2.2.4 AccessCheck Structure Version 3

0	1	2	3	4	5	6	7	8	9	1 0	1	2	3	4	5	6	7	8	9	2 0	1	2	3	4	5	6	7	8	9	3 0	1
0x01								0x00								0x00								0x00
cbNonce
Nonce (variable)
...
SID (variable)
...
Pad (variable)
...
Hash (64 bytes)
...
...

cbNonce (4 bytes): A 32-bit unsigned integer. It MUST be the length of Nonce, in bytes. This field is encoded using little-endian format.

Nonce (variable): This MUST contain an arbitrary binary value, as specified in section 3.2.4.1.

SID (variable): This MUST be a variable-length SID, marshaled in an RPC_SID structure ([MS-DTYP] section 2.4.2.3).

Pad (variable): This field MUST be 0 to 15 bytes long, such that the length of the AccessCheck structure is a multiple of 16 bytes.

Hash (64 bytes): This MUST be the SHA-512 hash [FIPS180-2] computed over all the preceding fields in the AccessCheck structure.