How does NetTcpBinding(read WindowsStreamSecurityBindingElement) encrypt/sign messages?

Question

Hi,

I wanted to understand the mechanism of message encryption and signing used by NetTcpBinding when 'Windows' credentials are being used with Transport security.  What if my AD uses NTLM instead of Kerberos? Will the messages still get signed and encrypted?If so, how?

Thanks in Advance,

Akshat