---
name: "krb5_rd_priv"
section: "3"
platform: "linux"
package: "heimdal-dev"
version: "7.8.git20221117.28daf24+dfsg-9+deb13u1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/krb5_rd_priv"
---

# krb5\_rd\_priv(3)

verifies authenticity of messages

## NAME

**krb5\_rd\_safe**, **krb5\_rd\_priv** – verifies authenticity of messages

## LIBRARY

Kerberos 5 Library (libkrb5, -lkrb5)

## SYNOPSIS

**#include \<krb5.h\>**

*krb5\_error\_code*\

**krb5\_rd\_priv**(*krb5\_context context*, *krb5\_auth\_context auth\_context*, *const krb5\_data \*inbuf*, *krb5\_data \*outbuf*, *krb5\_replay\_data \*outdata*);

*krb5\_error\_code*\

**krb5\_rd\_safe**(*krb5\_context context*, *krb5\_auth\_context auth\_context*, *const krb5\_data \*inbuf*, *krb5\_data \*outbuf*, *krb5\_replay\_data \*outdata*);

## DESCRIPTION

**krb5\_rd\_safe**() and **krb5\_rd\_priv**() parses KRB-SAFE and KRB-PRIV messages (as generated by [krb5\_mk\_safe(3)](/krb5_mk_safe/3.md) and [krb5\_mk\_priv(3)](/krb5_mk_priv/3.md)) from *inbuf* and verifies its integrity. The user data part of the message in put in *outbuf*. The encryption state, including keyblocks and addresses, is taken from *auth\_context*. If the KRB5\_AUTH\_CONTEXT\_RET\_SEQUENCE or KRB5\_AUTH\_CONTEXT\_RET\_TIME flags are set in the *auth\_context* the sequence number and time are returned in the *outdata* parameter.

## SEE ALSO

[krb5\_auth\_con\_init(3)](/krb5_auth_con_init/3.md), [krb5\_mk\_priv(3)](/krb5_mk_priv/3.md), [krb5\_mk\_safe(3)](/krb5_mk_safe/3.md)