anchor.diff:    ;; start by extracting the token from the buffer
     (let* ((tok (unpack-initial-context-token buffer))
   	 (req (kerberos-context-req context))
  -	 (session-key (ap-req-session-key req))
  +	 (session-key (subseq (encryption-key-value (kerberos-context-key context))
  +			      0 8))
   	 (initiator (kerberos-context-initiator context)))
       ;; get the seqno, cksum and encrypted body
       (let ((eseqno (subseq tok 8 16))
  
positive.code: 	   (key (map '(vector (unsigned-byte 8)) 
  		     (lambda (x) (logxor x #xf0))
  		     session-key))
  	   (cksum (des-mac (md5 message)
  			     nil
  			     session-key))
  	   (seqno (encrypt-des-cbc session-key 
  
negative.code: 						     (kerberos-context-seqno context)
  						     (authenticator-seqno (ap-req-authenticator req))))
  					   v)
  					 (if (not initiator) '(0 0 0 0) '(#xff #xff #xff #xff))))
  	      (error "Seqnos don't match"))))
  	;; return the decrypted message
  	message))))
  