anchor.diff:    (let* ((req (kerberos-context-req context))
   	 (session-key (kerberos-context-key context))
   	 (key (subseq (encryption-key-value session-key) 0 8))
  -	 (initiator (kerberos-context-initiator context)))
  +	 (initiator (kerberos-context-initiator context))
  +	 (message (concatenate '(vector (unsigned-byte 8)) message)))
       (pack-initial-context-token 
        (flexi-streams:with-output-to-sequence (s)
          (write-sequence '(1 1) s) ;; TOK_ID == getmic
  
positive.code:   (let* ((req (kerberos-context-req context))
  	 (tok (unpack-initial-context-token message-token))
  	 (session-key (ap-req-session-key req))
  	 (key (subseq (encryption-key-value session-key) 0 8)))
      ;; start by getting the checksum and seqno fields
      (let ((seqno (subseq tok 8 16))
  	  (cksum (subseq tok 16 24))
  
negative.code: 						     (kerberos-context-seqno context)
  						     (authenticator-seqno (ap-req-authenticator req))))
  					   v)
  					 (if (not initiator) '(0 0 0 0) '(#xff #xff #xff #xff))))
  	      (error "Seqnos don't match"))))
  	;; return the decrypted message
  	message))))
  