shishi_kdc_check_nonce(3)

📦
version 1.0.3 · 2 versions
  • 1.0.3 · debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking (latest)
  • 1.0.2 · ubuntu jammy
, in debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 shishi_kdc_check_nonce — the nonce vibe check 💖

ok so bestie, we're in section 3 of the shishi manual, and today's main character is shishi_kdc_check_nonce. it's an API function. it checks nonces. that's it, that's the plot. 🎀

✨ SYNOPSIS ✨

#include <shishi.h>

int shishi_kdc_check_nonce(Shishi * handle, Shishi_asn1 kdcreq,
       Shishi_asn1 enckdcreppart);

🌸 ARGUMENTS 🌸

  • Shishi * handle — your Shishi handle, and it's gotta be the one you got from shishi_init(). no off-brand handles pls 🫶
  • Shishi_asn1 kdcreq — the request, of type KDC-REQ. the ask. the opening move. 💅
  • Shishi_asn1 enckdcreppart — the encrypted KDC-REP part. the reply's lil locked-up section. 🔐

🦋 DESCRIPTION 🦋

okay so what this actually does: it verifies that kdcreq.req-body.nonce and enckdcreppart.nonce contain matching values. like, do these two numbers agree with each other or not. that's the whole job. 🔍

and lowkey this is important because it's one of the steps that has to be performed when you're processing an exchange of KDC-REQ and KDC-REP. not optional, not a vibe, it's a required step. periodt. 👑

🌈 RETURN VALUE 🌈

here's the tea, and it's giving multiple outcomes:

  • SHISHI_OK — slay, it worked, the nonces match, everything's fine ✨
  • SHISHI_NONCE_MISMATCH — returned whenever the nonces are of differing lengths. and bestie, apparently that's usually a sign that a buggy server truncates the nonce to 4 bytes 😭 (yes, 4. four. a whole four bytes.)
  • SHISHI_NONCE_MISMATCH — also returned, same code, if the nonce values differ. different reason, same energy 💀
  • or an error code otherwise. like, some other error. it happens. 🙈

🧚 REPORTING BUGS 🧚

found a bug? don't suffer in silence, tell the people:

Copyright © 2002-2022 Simon Josefsson.

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. (so yes, you can share it, just keep the receipts 💖)

⭐ SEE ALSO ⭐

the full documentation for shishi is maintained as a Texinfo manual. if the info and shishi programs are properly installed at your site, the command

info shishi

should give you access to the complete manual. go read it, it's got lore 📚

and that's the whole page, bestie!! this was the shishi_kdc_check_nonce(3) man page from shishi, version 1.0.3 — date energy, source energy, all of it. go check those nonces. mismatch is not the vibe. 🫶💜

📦 where this page comes from