Max SMB signing key length

[Christopher R. Hertel]

Did you check the Microsoft docs on this?  If it's not specified, then it
should be entered as a bug against the docs.  This is exactly the kind of
thing that Microsoft is *actually pro-actively looking* to fix.

:)

...in fact, it should be in the doc I wrote, probably in section 3.  The
latest version of [MS-CIFS] should be on the Microsoft website soon, if not
already.

Chris -)-----
...who has written so much that there's just not enough room in his brain to
remember it all.

Stefan (metze) Metzmacher wrote:
> Hi Andrew,
> 
> do you know what the maximum length of the SMB signing key could be?
> 
> I know with extended security (NTLMSSP 16 bytes or krb5 8-32 bytes)
> it's easy.
> 
> But without extended security we calculate the signing key
> out of the user_session_key and the nt or lm response blob.
> I assume the user_session_key is always 16 byte, but what is the max
> size of the response blob?
> 
> metze
>