Microsoft
Microsoft
Microsoftjust-tim "Is there a decoder ring available to determine the possible HEX values for DefaultDomainSupportedEncTypes? Some sources mention 0x3C includes RC4 and it would be better to use 0x18 or 0x38 to eliminate RC4."
I would have to agree with your that 0x3c appears to leave RC4 in play and that another value like 0x18 would remove it. I am not aware of a decoder ring but I asked an AI to help compute the mapping from decimal value 0-63 based on this documentation. Here is the output which appears to be correct from what I can tell.
| Decimal | Hexadecimal | Binary | Bit Flags Set | Supported Encryption Types |
|---|---|---|---|---|
| 0 | 0x00 | 00000000 00000000 00000000 00000000 | ||
| 1 | 0x01 | 00000000 00000000 00000000 00000001 | 0 | DES-CBC-CRC (A) |
| 2 | 0x02 | 00000000 00000000 00000000 00000010 | 1 | DES-CBC-MD5 (B) |
| 3 | 0x03 | 00000000 00000000 00000000 00000011 | 0, 1 | DES-CBC-CRC (A), DES-CBC-MD5 (B) |
| 4 | 0x04 | 00000000 00000000 00000000 00000100 | 2 | RC4-HMAC (C) |
| 5 | 0x05 | 00000000 00000000 00000000 00000101 | 0, 2 | DES-CBC-CRC (A), RC4-HMAC (C) |
| 6 | 0x06 | 00000000 00000000 00000000 00000110 | 1, 2 | DES-CBC-MD5 (B), RC4-HMAC (C) |
| 7 | 0x07 | 00000000 00000000 00000000 00000111 | 0, 1, 2 | DES-CBC-CRC (A), DES-CBC-MD5 (B), RC4-HMAC (C) |
| 8 | 0x08 | 00000000 00000000 00000000 00001000 | 3 | AES128-CTS-HMAC-SHA1-96 (D) |
| 9 | 0x09 | 00000000 00000000 00000000 00001001 | 0, 3 | DES-CBC-CRC (A), AES128-CTS-HMAC-SHA1-96 (D) |
| 10 | 0x0A | 00000000 00000000 00000000 00001010 | 1, 3 | DES-CBC-MD5 (B), AES128-CTS-HMAC-SHA1-96 (D) |
| 11 | 0x0B | 00000000 00000000 00000000 00001011 | 0, 1, 3 | DES-CBC-CRC (A), DES-CBC-MD5 (B), AES128-CTS-HMAC-SHA1-96 (D) |
| 12 | 0x0C | 00000000 00000000 00000000 00001100 | 2, 3 | RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D) |
| 13 | 0x0D | 00000000 00000000 00000000 00001101 | 0, 2, 3 | DES-CBC-CRC (A), RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D) |
| 14 | 0x0E | 00000000 00000000 00000000 00001110 | 1, 2, 3 | DES-CBC-MD5 (B), RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D) |
| 15 | 0x0F | 00000000 00000000 00000000 00001111 | 0, 1, 2, 3 | DES-CBC-CRC (A), DES-CBC-MD5 (B), RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D) |
| 16 | 0x10 | 00000000 00000000 00000000 00010000 | 4 | AES256-CTS-HMAC-SHA1-96 (E) |
| 17 | 0x11 | 00000000 00000000 00000000 00010001 | 0, 4 | DES-CBC-CRC (A), AES256-CTS-HMAC-SHA1-96 (E) |
| 18 | 0x12 | 00000000 00000000 00000000 00010010 | 1, 4 | DES-CBC-MD5 (B), AES256-CTS-HMAC-SHA1-96 (E) |
| 19 | 0x13 | 00000000 00000000 00000000 00010011 | 0, 1, 4 | DES-CBC-CRC (A), DES-CBC-MD5 (B), AES256-CTS-HMAC-SHA1-96 (E) |
| 20 | 0x14 | 00000000 00000000 00000000 00010100 | 2, 4 | RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96 (E) |
| 21 | 0x15 | 00000000 00000000 00000000 00010101 | 0, 2, 4 | DES-CBC-CRC (A), RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96 (E) |
| 22 | 0x16 | 00000000 00000000 00000000 00010110 | 1, 2, 4 | DES-CBC-MD5 (B), RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96 (E) |
| 23 | 0x17 | 00000000 00000000 00000000 00010111 | 0, 1, 2, 4 | DES-CBC-CRC (A), DES-CBC-MD5 (B), RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96 (E) |
| 24 | 0x18 | 00000000 00000000 00000000 00011000 | 3, 4 | AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E) |
| 25 | 0x19 | 00000000 00000000 00000000 00011001 | 0, 3, 4 | DES-CBC-CRC (A), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E) |
| 26 | 0x1A | 00000000 00000000 00000000 00011010 | 1, 3, 4 | DES-CBC-MD5 (B), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E) |
| 27 | 0x1B | 00000000 00000000 00000000 00011011 | 0, 1, 3, 4 | DES-CBC-CRC (A), DES-CBC-MD5 (B), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E) |
| 28 | 0x1C | 00000000 00000000 00000000 00011100 | 2, 3 | RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E) |
| 29 | 0x1D | 00000000 00000000 00000000 00011101 | 0, 2, 3 | DES-CBC-CRC (A), RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E) |
| 30 | 0x1E | 00000000 00000000 00000000 00011110 | 1, 2, 3 | DES-CBC-MD5 (B), RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E) |
| 31 | 0x1F | 00000000 00000000 00000000 00011111 | 0, 1, 2, 3 | DES-CBC-CRC (A), DES-CBC-MD5 (B), RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E) |
| 32 | 0x20 | 00000000 00000000 00000000 00100000 | 5 | AES256-CTS-HMAC-SHA1-96-SK (J) |
| 33 | 0x21 | 00000000 00000000 00000000 00100001 | 0, 5 | DES-CBC-CRC (A), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 34 | 0x22 | 00000000 00000000 00000000 00100010 | 1, 5 | DES-CBC-MD5 (B), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 35 | 0x23 | 00000000 00000000 00000000 00100011 | 0, 1, 5 | DES-CBC-CRC (A), DES-CBC-MD5 (B), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 36 | 0x24 | 00000000 00000000 00000000 00100100 | 2, 5 | RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 37 | 0x25 | 00000000 00000000 00000000 00100101 | 0, 2, 5 | DES-CBC-CRC (A), RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 38 | 0x26 | 00000000 00000000 00000000 00100110 | 1, 2, 5 | DES-CBC-MD5 (B), RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 39 | 0x27 | 00000000 00000000 00000000 00100111 | 0, 1, 2, 5 | DES-CBC-CRC (A), DES-CBC-MD5 (B), RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 40 | 0x28 | 00000000 00000000 00000000 00101000 | 3, 5 | AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 41 | 0x29 | 00000000 00000000 00000000 00101001 | 0, 3, 5 | DES-CBC-CRC (A), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 42 | 0x2A | 00000000 00000000 00000000 00101010 | 1, 3, 5 | DES-CBC-MD5 (B), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 43 | 0x2B | 00000000 00000000 00000000 00101011 | 0, 1, 3, 5 | DES-CBC-CRC (A), DES-CBC-MD5 (B), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 44 | 0x2C | 00000000 00000000 00000000 00101100 | 2, 3, 5 | RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 45 | 0x2D | 00000000 00000000 00000000 00101101 | 0, 2, 3, 5 | DES-CBC-CRC (A), RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 46 | 0x2E | 00000000 00000000 00000000 00101110 | 1, 2, 3, 5 | DES-CBC-MD5 (B), RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 47 | 0x2F | 00000000 00000000 00000000 00101111 | 0, 1, 2, 3, 5 | DES-CBC-CRC (A), DES-CBC-MD5 (B), RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 48 | 0x30 | 00000000 00000000 00000000 00110000 | 4, 5 | AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 49 | 0x31 | 00000000 00000000 00000000 00110001 | 0, 4, 5 | DES-CBC-CRC (A), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 50 | 0x32 | 00000000 00000000 00000000 00110010 | 1, 4, 5 | DES-CBC-MD5 (B), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 51 | 0x33 | 00000000 00000000 00000000 00110011 | 0, 1, 4, 5 | DES-CBC-CRC (A), DES-CBC-MD5 (B), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 52 | 0x34 | 00000000 00000000 00000000 00110100 | 2, 4, 5 | RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 53 | 0x35 | 00000000 00000000 00000000 00110101 | 0, 2, 4, 5 | DES-CBC-CRC (A), RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 54 | 0x36 | 00000000 00000000 00000000 00110110 | 1, 2, 4, 5 | DES-CBC-MD5 (B), RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 55 | 0x37 | 00000000 00000000 00000000 00110111 | 0, 1, 2, 4, 5 | DES-CBC-CRC (A), DES-CBC-MD5 (B), RC4-HMAC (C), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 56 | 0x38 | 00000000 00000000 00000000 00111000 | 3, 4, 5 | AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 57 | 0x39 | 00000000 00000000 00000000 00111001 | 0, 3, 4, 5 | DES-CBC-CRC (A), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 58 | 0x3A | 00000000 00000000 00000000 00111010 | 1, 3, 4, 5 | DES-CBC-MD5 (B), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 59 | 0x3B | 00000000 00000000 00000000 00111011 | 0, 1, 3, 4, 5 | DES-CBC-CRC (A), DES-CBC-MD5 (B), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |
| 60 | 0x3C | 00000000 00000000 00000000 00111100 | 2, 3, 4, 5 | RC4-HMAC (C), AES128-CTS-HMAC-SHA1-96 (D), AES256-CTS-HMAC-SHA1-96 (E), AES256-CTS-HMAC-SHA1-96-SK (J) |