Where do your encryption keys want to go today?


Published: Apr 04, 2000 Updated: Apr 04, 2000 Section: Network Security Library :: Cryptography Author: Printable Version Adjust font size: Rating: 4/5 - 2 Votes 1 2 3 4 5

Microsoft use two different file formats to protect users private keys when stored on disk, the original (unnamed) format which was used in older versions of MSIE, IIS, and other software and which is still supported for backwards-compatibility reasons in newer versions, and the newer PFX/PKCS #12 format. Due to a number of design and implementation flaws in Microsofts software, it is possible to break the security of both of these formats and recover users private keys, often in a matter of seconds.

Click Here to download this article