MS-PST – How to Navigate the Node BTree

The current version of the MS-PST open specification document can be found here: http://msdn.microsoft.com/en-us/library/ff385210(office.12).aspx     Introduction The PST is a structured binary file format that contains messages, folders, and attachments. The file structure can be logically separated into 3 layers: the Node Database (NBD) layer, the Lists, Tables, and Properties (LTP) layer, and the…

0

Encryption Type Selection in Kerberos Exchanges

     The types of encryption used in various Kerberos exchanges are very important and sometime confusing aspects of the Kerberos implementation.  We not only need to understand the Kerberos RFC (RFC 4120, RFC 3961 etc) that specifies generally how the encryption types should be selected, but also the effects of Windows  Active Directory and registry…

5

NTLM Terminology: MS-NLMP vs. http://davenport.sourceforge.net/ntlm.html

The NTLM Authentication protocol is an old relic. Microsoft, the inventor of the protocol, itself discourages its use and recommends using Kerberos. But I expect NTLM to be around for a long time. The reason is Kerberos’s use of Key Distribution Center (KDC) and Ticket Granting Server (TGS). These two entities are generally co-located but…

3

Notes on sparse files and file sharing

Sparse files are generally referred to as files, often large, that contain only a small amount of nonzero data relative to their size. In this blog, I would like to chat about sparse files on Windows operating systems and the related SMB commands. From an inter-operability perspective, I intend to discuss: – implications of a…