crypto_krb5_verify_mic(9)

📦 version 7.3.1, in nixpkgs unstable

💅 crypto_krb5_verify_mic — Kernel API Manual, bestie edition 🎀

okay so this is crypto_krb5_verify_mic(9) and honestly? she's the vibe check of the Kerberos crypto layer. she looks at your integrity checksum, verifies it's actually valid, and then yeets it out of the buffer. iconic behavior honestly 🦋

✨ NAME ✨

crypto_krb5_verify_mic — validate and remove the Kerberos integrity checksum 💖

🌸 SYNOPSIS 🌸

int crypto_krb5_verify_mic (const struct krb5_enctype *krb5 , struct
crypto_shash *shash , const struct krb5_buffer *metadata , struct
scatterlist *sg , unsigned int nr_sg , size_t *_offset , size_t *_len );

🫶 ARGUMENTS 🫶

  • krb5 — the encoding to use, periodt ✨
  • shash — the keyed hash to use 🔥
  • metadata — metadata that gets added into the hash before the data goes in, no cap
  • sg — the scatterlist that defines the crypto buffer 🎀
  • nr_sg — how many elements are in sg, literally just the count
  • _offset — offset of the secure blob in the buffer; gets updated to the data offset 👑
  • _len — length of the secure blob; gets updated to the data length ⭐

💜 DESCRIPTION 💜

okay so what she actually does: using the specified Kerberos encoding, she checks the integrity checksum and then removes it. lowkey a whole queen for that 💅

if it all works out, _offset and _len get updated so they outline the region where the data is actually stored. slay 🌈

returns 0 if successful, -ENOMEM on an allocation failure; sets *_error_code and returns -EPROTO if the data cannot be parsed, or -EBADMSG if the checksum doesn't match). ngl if that checksum doesn't match it's giving 💀

also, other errors may still be returned from the crypto layer, so don't come for her if something else shows up 🙈

🧚 SEE ALSO 🧚

kernel file ./crypto/krb5/krb5_api.c plus her whole friend group:

and that's the whole page bestie 💖 brought to you straight out of ./crypto/krb5, dated October 2026, and yes she's still serving crypto_krb5_verify_mic(9) energy at the very end. mwah 🍓

📦 where this page comes from