From b8639c8a62aea0b5874d751e00150c3252b8b037 Mon Sep 17 00:00:00 2001
From: gpotter2 <10530980+gpotter2@users.noreply.github.com>
Date: Thu, 12 Nov 2026 23:45:34 +0100
Subject: [PATCH] kerberos: minor wording changes

---
 scapy/layers/kerberos.py       | 2 +-
 test/scapy/layers/kerberos.uts | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/scapy/layers/kerberos.py b/scapy/layers/kerberos.py
index 3cb4784d577..38364e65e10 100644
--- a/scapy/layers/kerberos.py
+++ b/scapy/layers/kerberos.py
@@ -6084,7 +6084,7 @@ def GSS_Accept_sec_context(
                     )
                     return Context, err, gssErrorCode
 
-                # Cache authenticators to avoid replay
+                # Store the time for future detections
                 self.ReplayCache[replay_key] = ctime + KRB_MaxClockSkew
 
                 # We take that opportunity to cleanup any expired items
diff --git a/test/scapy/layers/kerberos.uts b/test/scapy/layers/kerberos.uts
index c51b801c12d..c0dd5cfbe58 100644
--- a/test/scapy/layers/kerberos.uts
+++ b/test/scapy/layers/kerberos.uts
@@ -1915,7 +1915,7 @@ assert passiveState == GSS_S_COMPLETE
 assert passiveContext.passive
 assert passiveContext.ssp_context.passive
 
-= GSS_Accept_sec_context rejects a replayed AP-REQ without the replay flag
+= GSS_Accept_sec_context rejects a replayed AP-REQ
 
 from scapy.layers.gssapi import GSS_S_DUPLICATE_TOKEN