3.4.5.5 GSS_UnwrapEx() Call

This call is an extension to GSS_Unwrap ([RFC2743] section 2.3.4) that passes multiple buffers.

Inputs:

  • context_handle CONTEXT HANDLE

  • input_message ORDERED LIST of:

    • conf_state BOOLEAN

    • signed BOOLEAN

    • data OCTET STRING

  • signature OCTET STRING

Outputs:

  • qop_req INTEGER, -- 0 specifies default QOP

  • major_status INTEGER

  • minor_status INTEGER

  • output_message ORDERED LIST (in same order as input_message) of:

    • conf_state BOOLEAN

    • data OCTET STRING

This call is identical to GSS_Unwrap, except that it supports multiple input buffers. Input data buffers for which conf_state==TRUE are decrypted in output_message. The signature is verified for the input data buffers where signed==TRUE, that are concatenated as specified in section 3.4.5.4.1.