2.2.2.9.2 NTLMSSP_MESSAGE_SIGNATURE for Extended Session Security

This version of the NTLMSSP_MESSAGE_SIGNATURE structure MUST be used when the NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY flag is negotiated.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

Version

Checksum

...

SeqNum

Version (4 bytes):  A 32-bit unsigned integer that contains the signature version. This field MUST be 0x00000001.

Checksum (8 bytes):  An 8-byte array that contains the checksum for the message.

SeqNum (4 bytes):  A 32-bit unsigned integer that contains the NTLM sequence number for this application message.