 | 1 | initial version |
Hello
SMB3 supports signing. The key is negotiated during the Session Setup phase. You should see the first signature in the Session Setup Response.
SMB (including SMB2 and SMB3) can only use signing if both sides support this option. The Session Setup Response is the first opportunity to do this.
SMB-encryption is enabled on a per-share base. Hence the first messages of the SMB connection will exchanged in plain text. Once a Tree Connect has completed all following traffic will be encrypted and signed.
SMB3 digital signatures work as desired.
Happy sniffing
