3.3 Signatures

The last two sections in this example are the signatures of the PAC contents, as specified in PAC_SIGNATURE_DATA (section 2.8). These signatures allow the KDC or the principal verifying the PAC to determine if the contents have been modified. The first signature is as follows:

 00000520                    76 ff-ff ff 41 ed ce 9a 34 81        v...A...4.
 00000530  5d 3a ef 7b c9 88 74 80-5d 25                    ]:.{..t.]%

In this example, the SignatureType field is 0xFFFFFF76, or -138. The resulting hash is contained in the following 16 bytes, 0x0000052A through 0x00000539.

The last signature is similarly decoded.