Patent ID: 8452968

Claim:
A method for communicating a message having a Hash Message Authentication Code (HMAC) signature from a first endpoint to a second endpoint, wherein HMAC information associated with the message includes a plurality of components, the method comprising: intercepting the HMAC information; determining values for at least one of the plurality of components of the HMAC information using the intercepted HMAC information, wherein the values include a secret key determined from one or more of a Security Support Provider Interface (SSPI) and Generic Security Service Application Programming Interface (GSS-API) interface entry point using an application programming interface (API) hook, the API hook exposing, via a kernel mode dynamic-link library (DLL), one or more of the SSPI and GSS-API interface entry points so as to allow the secret key to be queried at one or more of the SSPI and GSS-API interface entry points; intercepting the message having the HMAC signature; modifying the message; resigning the modified message using the determined values; and transmitting the resigned message to the second endpoint.