Method decrypt_as_rep

scapy/layers/kerberos.py:4048–4081

(self, pkt)

    @ATMT.action(receive_as_rep)
    def decrypt_as_rep(self, pkt):
        # Process PADATAs. This is important for FAST and PKINIT
        self._process_padatas_and_key(
            pkt.root.padata,
            etype=pkt.root.encPart.etype.val,
        )

        if not self.pre_auth:
            log_runtime.warning("Pre-authentication was disabled for this account !")

        # Process FAST response
        if self.fast_rep:
            # Verify the ticket-checksum
            self.fast_rep.finished.ticketChecksum.verify(
                self.fast_armorkey,
                bytes(pkt.root.ticket),
            )
            self.fast_rep = None
        elif self.fast:
            raise ValueError("Answer was not FAST ! Is it supported?")

        # Check for PKINIT
        if self.x509 and self.replykey is None:
            raise ValueError("PKINIT was used but no valid PA-PK-AS-REP was found !")

        # Decrypt AS-REP response
        enc = pkt.root.encPart
        res = enc.decrypt(self.replykey)
        self.result = self.RES_AS_MODE(
            pkt.root,
            res.key.toKey(),
            res,
            pkt.root.getUPN(),
        )

    @ATMT.receive_condition(SENT_TGS_REQ)
    def receive_krb_error_tgs_req(self, pkt):