gss_unwrap(3)						     Library Functions Manual						     gss_unwrap(3)

NAME

       gss_unwrap - verify a message with attached message integrity code (MIC) and decrypt message content if necessary

SYNOPSIS


DESCRIPTION

       The routine converts a protected message to a usable form and verifies the embedded message integrity code (MIC).  The conf_state parameter
       indicates whether the message was encrypted.  The qop_state parameter indicates the quality of protection that was used to provide the con-
       fidentiality and integrity services.

   Input Parameters
       context_handle	     Specifies the context on which the message arrived.

       input_message_buffer  Specifies the protected message.

       output_message_buffer Specifies the buffer to receive the unwrapped message.

   Output Parameters
       conf_state	     Returns the requested level of confidentiality and integrity services, as follows:

			     Non-zero	 Both confidentiality and integrity services were used.

			     zero	 Only integrity services was used.

       qop_state	     Returns the cryptographic algorithm, or quality of protection.

       minor_status	     Returns a status code from the security mechanism.

STATUS CODES

       The following status codes can be returned:

       The routine was completed successfully.

       The signature was incorrect.

       The context has already expired.

       The context is recognized but the associated
				credentials have expired.

       The token failed consistency checks.

       The token was valid and contained the correct
				signature but it had already been processed.

       The routine failed.	The context specified in the context_handle parameter was not valid.

       The context identified in the
				context_handle parameter was not valid.

       The token was valid and contained the correct signature
				but it is too old.

       The token was valid, and contained a correct MIC
				for the message, but has been verified out of sequence; a later token has already been received.

       The token was valid, and contained a correct MIC
				for the message, but has been verified out of sequence; an earlier expected token has not yet been received.

AUTHOR

       was developed by Sun Microsystems, Inc.

SEE ALSO

       gss_get_mic(3), gss_wrap(3).

																     gss_unwrap(3)