3.3 Signatures

  • Article

The last two sections in this example are the signatures of the PAC contents, as specified in PAC_SIGNATURE_DATA (section 2.8). These signatures allow the KDC or the principal verifying the PAC to determine if the contents have been modified. The first signature is as follows.

 00000520                    76 ff-ff ff 41 ed ce 9a 34 81        v...A...4.
 00000530  5d 3a ef 7b c9 88 74 80-5d 25                    ]:.{..t.]%

In this example, the SignatureType field is 0xFFFFFF76, or -138. The resulting hash is contained in the following 16 bytes, 0x0000052A through 0x00000539.

The last signature is similarly decoded.