https://themanticoreproject.com/tags/keycredential/Recent content in Keycredential on The Manticore ProjectHugoen-USWed, 12 Nov 2025 10:07:49 +0000https://themanticoreproject.com/blog/manticore-v1-0-8-keycredential-refactor/Wed, 12 Nov 2025 10:07:49 +0000https://themanticoreproject.com/blog/manticore-v1-0-8-keycredential-refactor/<p>Manticore is the Go library of offensive and defensive security primitives I maintain for The Manticore Project. It provides the building blocks (Windows structures, cryptography, LDAP and network plumbing) that the project&rsquo;s tools rely on. Not every release adds a feature; some exist to clean up and tighten the existing code.</p> <p>v1.0.8 is one of those. There are no new capabilities here. Instead, I spent this release refactoring the KeyCredentialLink and CustomKeyInformation code, tidying up the LDAP <code>DNWithBinary</code> type, tightening error handling, and removing debug output that should never have shipped. This kind of work does not change what the library does, but makes it easier and safer to build on.</p>https://themanticoreproject.com/blog/manticore-v1-0-7-keycredential-and-bcrypt-ecc/Tue, 11 Nov 2025 12:21:19 +0000https://themanticoreproject.com/blog/manticore-v1-0-7-keycredential-and-bcrypt-ecc/<p>Manticore is The Manticore Project&rsquo;s Go library of offensive and defensive security primitives. It is the foundation that most of our tools build on, so each release tends to focus on making one or two of those primitives more correct and more pleasant to use. In v1.0.7 I focused on the <code>keycredential</code> package: extending its cryptographic key support, tidying up its internal structure, and aligning one piece of its API with the naming conventions used across the rest of the library.</p>https://themanticoreproject.com/blog/manticore-v1-0-4-keycredential-time-fixes/Wed, 29 Oct 2025 10:58:34 +0000https://themanticoreproject.com/blog/manticore-v1-0-4-keycredential-time-fixes/<p>Manticore is the Go library of offensive and defensive security primitives that underpins the tools of The Manticore Project. This release, <strong>v1.0.4</strong>, is a small maintenance update: there are no new features, just a focused round of bug fixes in the Windows KeyCredential time handling.</p> <h2 id="keycredential-time-functions">KeyCredential time functions</h2> <p>KeyCredential blobs (the <code>msDS-KeyCredentialLink</code> attribute used by Windows Hello for Business and shadow-credentials tooling) carry timestamps such as the key creation and last-update times. Getting these conversions right matters, since an off-by-one or misencoded timestamp can produce a blob that the directory rejects, or one that misrepresents when a key was created.</p>https://themanticoreproject.com/blog/manticore-v1-0-3-smbv1-and-minor-fixes/Tue, 28 Oct 2025 16:12:47 +0000https://themanticoreproject.com/blog/manticore-v1-0-3-smbv1-and-minor-fixes/<p>Manticore is the Go library of offensive and defensive security primitives that powers the tools of The Manticore Project. It provides the building blocks (protocol structures, Active Directory abstractions, cryptographic helpers) that the individual tools rely on so that each tool does not have to reimplement the same plumbing.</p> <p>This release, v1.0.3, is a mix of new groundwork and small corrections. The headline is the start of SMB v1.0 support, but most of the work here is about tightening interfaces that already existed and adding the project governance documents that the repository was missing. None of these changes are large on their own; together they make the library a little more correct and a little easier to contribute to.</p>