TokenBindingVerifyMessage function

Validates the token binding message and verifies the token bindings that the message contains.

Syntax

SECURITY_STATUS TokenBindingVerifyMessage(
  const void                       *tokenBindingMessage,
  DWORD                            tokenBindingMessageSize,
  TOKENBINDING_KEY_PARAMETERS_TYPE keyType,
  const void                       *tlsEKM,
  DWORD                            tlsEKMSize,
  TOKENBINDING_RESULT_LIST         **resultList
);

Parameters

tokenBindingMessage

A pointer to the buffer that contains the token binding message.

tokenBindingMessageSize

The size of the buffer that the tokenBindingMessage parameter points to, in bytes.

keyType

The negotiated key algorithm to use. Use a value from the list of key types that you retrieved by calling the TokenBindingGetKeyTypesServer function.

tlsEKM

A pointer to a buffer that contains unique data.

tlsEKMSize

The size of the buffer that the tlsUnique parameter points to, in bytes.

resultList

A pointer that receives the address for the buffer that contains the results for each of the token bindings that TokenBindingVerifyMessage verifies.

In user mode, use HeapAlloc to allocate the memory for the buffer, and HeapFree to free that memory. In kernel mode, use ExAllocatePoolWithTag to allocate the memory for the buffer, and ExFreePool to free that memory.

Return Value

Returns a status code that indicates the success or failure of the function.

Remarks

You can call TokenBindingVerifyMessage from both user mode and kernel mode. o call this function in kernel mode, link to Ksecdd.sys, and use the functions mentioned in the description for the resultList parameter for allocating and freeing memory.

Requirements

   
Minimum supported client Windows 10 [desktop apps only]
Minimum supported server Windows Server 2016 [desktop apps only]
Target Platform Windows
Header tokenbinding.h
Library Tokenbinding.lib
DLL Tokenbinding.dll (user mode); Ksecdd.sys (kernel mode)

See Also

ExAllocatePoolWithTag

ExFreePool

TOKENBINDING_RESULT_LIST

TokenBindingGenerateMessage

TokenBindingGetKeyTypesServer