| Previous | Next |
| SEC_E_NO_CREDENTIALS | SEC_E_OUT_OF_SEQUENCE |
SEC_E_MESSAGE_ALTERED
SEC_E_MESSAGE_ALTERED means that SSPI could not verify the integrity of a protected message or signature. The bytes supplied for verification do not match the protection data associated with the security context.
Possible causes
- Truncated, overwritten or mixed buffers in the application.
- Incorrect framing that combines records from different connections.
- Actual corruption or tampering on an unprotected boundary before SSPI receives the bytes.
How to handle it
Discard the affected security context and do not deliver the message as valid data. Capture buffer boundaries, connection identity and protocol stage; content logs should be redacted because the input can contain secrets.
Microsoft: DecryptMessage · SSPI Status Codes
Looking for a different code? Search another status or error code.