Response to Microsoft's claims about security problems in CryptoAPI and MSIE et al.


Published: Apr 04, 2000 Updated: Apr 04, 2000 Section: Network Security Library :: Cryptography Author: Printable Version Adjust font size: Rating: 3/5 - 1 Votes 1 2 3 4 5

A fortnight ago I posted a message exposing a number of weaknesses in the way various Microsoft security products handle users private keys. A few days before I was due to vanish for a security conference (where it was very difficult to contact me), the article started getting a bit of attention. This is a general response which clarifies several issues relating to the original message.

Click Here to download this article