3 Protocol Details
The following sections offer a detailed specification of the NTLM message computation:
Sections 3.1.5 and 3.2.5 specify how the client and server compute messages and respond to messages.
Section 3.3 specifies how the response computation is calculated, depending on whether NTLM v1 or NTLM v2 is used. This includes the ComputeResponse function, as well as the NTOWF and LMOWF functions, which are used by the ComputeResponse function.
Section 3.4 specifies how message integrity and message confidentiality are provided, including a detailed specification of the algorithms used to calculate the signing and sealing keys.
The Cryptographic Operations Reference in section 6 defines the cryptographic primitives used in this section.