2.2.2.9.1 NTLMSSP_MESSAGE_SIGNATURE

This version of the NTLMSSP_MESSAGE_SIGNATURE structure MUST be used when the NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY flag is not negotiated.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

Version

RandomPad

Checksum

SeqNum

Version (4 bytes): A 32-bit unsigned integer that contains the signature version. This field MUST be 0x00000001.

RandomPad (4 bytes): A 4-byte array that contains the random pad for the message.

Checksum (4 bytes): A 4-byte array that contains the checksum for the message.

SeqNum (4 bytes): A 32-bit unsigned integer that contains the NTLM sequence number for this application message.