org.apache.directory.server.kerberos.sam
Interface KeyIntegrityChecker

All Known Implementing Classes:
TimestampChecker

public interface KeyIntegrityChecker

Checks the integrity of a kerberos key to decode-decrypt an encrypted generalized timestamp representing the pre-auth data.

Version:
$Rev: 434436 $
Author:
Apache Directory Project

Method Summary
 boolean checkKeyIntegrity(byte[] preauthData, javax.security.auth.kerberos.KerberosKey key)
          Checks the integrity of a KerberosKey to decrypt-decode and compare an encrypted encoded generalized timestamp representing the preauth data.
 

Method Detail

checkKeyIntegrity

boolean checkKeyIntegrity(byte[] preauthData,
                          javax.security.auth.kerberos.KerberosKey key)
Checks the integrity of a KerberosKey to decrypt-decode and compare an encrypted encoded generalized timestamp representing the preauth data.

Parameters:
preauthData - the generalized timestamp encrypted with client hotp generated KerberosKey
key - the KerberosKey generated from server side hotp value
Returns:
true if the key can decrypt-decode and make sense out of the timestamp verifying that it is in skew, false otherwise


Copyright © 2003-2012 Apache Software Foundation. All Rights Reserved.