When reading enctypes from ccaches, we need to sign-extend the 16-bit value we read in order to properly read negative enctypes. https://github.com/krb5/krb5/commit/c0cd63413841b3b85e0f70c6949322cc6299afb5 Commit By: ghudson Revision: 24021 Changed Files: U trunk/src/lib/krb5/ccache/cc_file.c