Manual Pages  — KRB5_ENCRYPT

krb5_encrypt_ivec() puts the encrypted version of data (of size len) in result. If the encryption type supports using derived keys, usage should be the appropriate key-usage. ivec is a pointer to a initial IV, it is modified to the end IV at the end of the round. Ivec should be the size of If NULL is passed in, the default IV is used. krb5_encrypt() does the same as krb5_encrypt_ivec() but with ivec being NULL. krb5_encrypt_EncryptedData() does the same as krb5_encrypt(), but it puts the encrypted data in a EncryptedData structure instead. If kvno is not zero, it will be put in the (optional) kvno field in the EncryptedData.

krb5_decrypt_ivec(), krb5_decrypt(), and krb5_decrypt_EncryptedData() works similarly.

krb5_decrypt_ticket() decrypts the encrypted part of ticket with key. krb5_decrypt_ticket() also verifies the timestamp in the ticket, invalid flag and if the KDC haven't verified the transited path, the transit path.

krb5_enctype_keysize(), krb5_crypto_getconfoundersize(), krb5_crypto_getblocksize(), krb5_crypto_getenctype(), krb5_crypto_getpadsize(), krb5_crypto_overhead() all returns various (sometimes) useful information from a crypto context. krb5_crypto_overhead() is the combination of krb5_crypto_getconfoundersize, krb5_crypto_getblocksize and krb5_crypto_getpadsize and return the maximum overhead size.