anchor.diff:  	   (key (map '(vector (unsigned-byte 8)) 
   		     (lambda (x) (logxor x #xf0))
   		     session-key))
  -	   (cksum (des-mac (md5 message)
  +	   (cksum (des-mac (md5 msg) ;;message)
   			     nil
   			     session-key))
   	   (seqno (encrypt-des-cbc session-key 
  
positive.code:       (let* ((msg (decrypt-des-cbc key emsg))
  	     (message (subseq msg 8))) ;; drop the confounder 
  	;; compute the checksum
  	(let ((the-cksum (des-mac (md5 message)
  				  nil
  				  session-key)))
  	  ;; validate the checksums match
  
negative.code:   (let* ((req (kerberos-context-req context))
  	 (session-key (kerberos-context-key context))
  	 (key (subseq (encryption-key-value session-key) 0 8))
  	 (initiator (kerberos-context-initiator context))
  	 (message (concatenate '(vector (unsigned-byte 8)) message)))
      (pack-initial-context-token 
       (flexi-streams:with-output-to-sequence (s)
         (write-sequence '(1 1) s) ;; TOK_ID == getmic
  