org.apache.directory.server.kerberos.sam
Interface KeyIntegrityChecker
- All Known Implementing Classes:
- TimestampChecker
public interface KeyIntegrityChecker
Checks the integrity of a kerberos key to decode-decrypt an encrypted
generalized timestamp representing the pre-auth data.
- Version:
- $Rev: 434436 $
- Author:
- Apache Directory Project
Method Summary |
boolean |
checkKeyIntegrity(byte[] preauthData,
javax.security.auth.kerberos.KerberosKey key)
Checks the integrity of a KerberosKey to decrypt-decode and compare an
encrypted encoded generalized timestamp representing the preauth data. |
checkKeyIntegrity
boolean checkKeyIntegrity(byte[] preauthData,
javax.security.auth.kerberos.KerberosKey key)
- Checks the integrity of a KerberosKey to decrypt-decode and compare an
encrypted encoded generalized timestamp representing the preauth data.
- Parameters:
preauthData
- the generalized timestamp encrypted with client hotp
generated KerberosKeykey
- the KerberosKey generated from server side hotp value
- Returns:
- true if the key can decrypt-decode and make sense out of the
timestamp verifying that it is in skew, false otherwise
Copyright © 2003-2010 Apache Software Foundation. All Rights Reserved.