3.1.5.12 RemoteCallKerbVerifyChecksum
The RemoteCallKerbVerifyChecksum call uses the Kerberos VerifyChecksum message (section 2.2.2.1.12) to take input data, a key, and an expected checksum as inputs. The checksum operation is then performed over the input data and key, and compared with the expected value. The output message indicates whether the checksum is a match or not.
To perform this message exchange, the CredSSP server MUST send a KerbCredIsoRemoteInput object to the CredSSP client. The CallId field MUST be set to RemoteCallKerbVerifyChecksum, and the VerifyChecksum member of the union MUST be populated.
To reply to the preceding input message, the CredSSP client MUST respond with a KerbCredIsoRemoteOutput object. The CallId field MUST be set to RemoteCallKerbVerifyChecksum, and the VerifyChecksum member of the union MUST be populated.