Changes by: antona
Update of /cvsroot/linux-ntfs/ntfsprogs/include/ntfs
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv24797
Modified Files:
layout.h
Log Message:
Update some efs info (the 16byte fields in the header are md5 hashes of the
decrypted fek, ddfs, and drfs. windows uses them as a sanity check and a check
that the efs attribute has not been tampered with.)
Index: layout.h
===================================================================
RCS file: /cvsroot/linux-ntfs/ntfsprogs/include/ntfs/layout.h,v
retrieving revision 1.24
retrieving revision 1.25
diff -u -p -r1.24 -r1.25
--- layout.h 28 Jul 2005 10:36:32 -0000 1.24
+++ layout.h 29 Jul 2005 09:54:02 -0000 1.25
@@ -2392,9 +2392,9 @@ typedef struct {
u32 unknown1; /* always 0? */
u32 unknown2; /* number of DDFs? */
u32 unknown3; /* number of DRFs? */
-/* 16*/ u8 unknown4[16]; /* MD5 hash related to DDFs? */
-/* 32*/ u8 unknown5[16]; /* MD5 hash related to DRFs? */
-/* 48*/ u8 unknown6[16]; /* always 0? */
+/* 16*/ u8 unknown4[16]; /* MD5 hash of decrypted FEK? */
+/* 32*/ u8 unknown5[16]; /* MD5 hash of DDFs? */
+/* 48*/ u8 unknown6[16]; /* MD5 hash of DRFs? */
/* 64*/ u32 offset_to_ddf_array;/* Offset in bytes to the array of data
decryption fields (DDF), see below. Zero if
no DDFs are present. */
|