rgillis70
Premium
join:2002-12-30
Herndon, VA
| Microsoft Cryptography
First this is not a bash MS or rave MS thread. I post this to hopefully better understand something I read.
I was reading the Washington Post today and came across this article in a discussion about Longhorn:
Longhorn is the first Windows version to implement Microsoft's vision of boosting security by putting cryptographic keys in special silicon chips that would be built into PCs. Currently, such encryption locks are stored as data on a hard drive.
The security chip in computers running Longhorn would render sensitive files inaccessible if someone tried to boot the machine from a portable hard drive or floppy disk.
Some privacy advocates said the new chip could enable strict copyright protection schemes and restrict the tinkering that has helped drive computer industry innovation. Now I am not going to pretend as if I understand the Pros and Cons of this idea - that is why I am posting this. Can anyone here enlighten me as to benefits of this - and the known and/or speculated downside?
Thanks in advance to all you encryption wizards.  |
|
astirusty
Premium
join:2000-12-23
Henderson, NV | A discussion on the topic is pseudo started, take a look at this thread:
»No Chip - No Data? |
|
rgillis70
Premium
join:2002-12-30
Herndon, VA | Thanks |
|
jansson_mark
Markus Jansson
Premium
join:2001-08-05
Finland
| reply to rgillis70
Microsoft and cryptography do not mix. They have never, ever, got anything regarding crypto right (atleast the first time they try it). Just look at PPTP, PPTP2, Win2000 EFS, LMhash, etc. etc. etc.
Besides, I dont see any reason to put the keys into chips. It would be far more secure just to ENCRYPT the keys (like in Mac, where they are all stored encrypted in keychain) and store the encrypted keystore somewhere in hdd.
But, ofcourse, since Microsoft is infamous about not implementing or understanding anything about crypto, they probably would not get it right either (current Windows "secure storage place" is totally insecure and can be open up very easily using third party tools to reveal keys/passwords to Outlook Express, Internet Explorer, MSN messenger, LMhash, etc. etc. etc.).
To sum up: Its useless, its stupid and probably very hackable too...and simple use of good crypto would be much better.
--
My computer security & privacy related homepage »www.markusjansson.net Use HushTools or GnuPG/PGP to encrypt any email before sending it to me to protect our privacy. |
|
rgillis70
Premium
join:2002-12-30
Herndon, VA | Thanks Mark.
I took my discussion to the other link. Seen some of the other concerns that people have, not just som much as MS running it - but the technology in general.
Thanks again. |
|
