2.2.2.8 NTLM2 V2 Response: NTLMv2_RESPONSE

The NTLMv2_RESPONSE structure defines the NTLMv2 authentication NtChallengeResponse in the AUTHENTICATE_MESSAGE. This response is used only when NTLMv2 authentication is configured.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

Response (16 bytes)

...

...

NTLMv2_CLIENT_CHALLENGE (variable)

...

Response (16 bytes): A 16-byte array of unsigned char that contains the client's NTChallengeResponse as defined in section 3.3.2. Response corresponds to the NTProofStr variable from section 3.3.2.

NTLMv2_CLIENT_CHALLENGE (variable): A variable-length byte array, defined in section 2.2.2.7, that contains the ClientChallenge as defined in section 3.3.2. ChallengeFromClient corresponds to the temp variable from section 3.3.2.