Luke, I don't really object to the change, although I'm puzzled why it is necessary. Doesn't the krb5_checksum object have a checksum type? When do you need to guess checksum type on verify?