diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index 10b2c0fb3..d655217e3 100644
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -791,24 +791,6 @@ out:
     return ret;
 }
 
-krb5_error_code
-_kdc_verify_checksum(krb5_context context,
-		     krb5_crypto crypto,
-		     krb5_key_usage usage,
-		     const krb5_data *data,
-		     Checksum *cksum)
-{
-    krb5_error_code ret;
-
-    ret = krb5_verify_checksum(context, crypto, usage,
-			       data->data, data->length,
-			       cksum);
-    if (ret == KRB5_PROG_SUMTYPE_NOSUPP)
-	ret = KRB5KDC_ERR_SUMTYPE_NOSUPP;
-
-    return ret;
-}
-
 static krb5_error_code
 tgs_check_authenticator(krb5_context context,
 			krb5_kdc_configuration *config,
diff --git a/kdc/misc.c b/kdc/misc.c
index daa49a39e..c737f31b0 100644
--- a/kdc/misc.c
+++ b/kdc/misc.c
@@ -304,3 +304,20 @@ _kdc_get_preferred_key(krb5_context context,
     return EINVAL; /* XXX */
 }
 
+krb5_error_code
+_kdc_verify_checksum(krb5_context context,
+		     krb5_crypto crypto,
+		     krb5_key_usage usage,
+		     const krb5_data *data,
+		     Checksum *cksum)
+{
+    krb5_error_code ret;
+
+    ret = krb5_verify_checksum(context, crypto, usage,
+			       data->data, data->length,
+			       cksum);
+    if (ret == KRB5_PROG_SUMTYPE_NOSUPP)
+	ret = KRB5KDC_ERR_SUMTYPE_NOSUPP;
+
+    return ret;
+}