Password Verifier Generation


The password verifier uses a BinaryRC4EncryptionHeader structure, as specified in section The password verifier Salt field MUST be populated with the salt created during password key generation, as specified in section An additional 16-byte verifier is then hashed by using the MD5 hashing algorithm and encrypted by using the key generated in section, with a block number of 0x00000000.

The RC4 decryption stream MUST NOT be reset between decrypting EncryptedVerifier and EncryptedVerifierHash.