4 ms·
It doesn't. If you want NSA stuff, here you go: http://www.heise.de/tp/artikel/5/5263/1.html http://www.heise.de/tp/artikel/5/5263/1.html Short version: ADVAP
by 6d0debc071 13y ago
It doesn't. If you want NSA stuff, here you go:
http://www.heise.de/tp/artikel/5/5263/1.html http://www.heise.de/tp/artikel/5/5263/1.html
Short version: ADVAPI.DLL contains - or contained - keys, one controls the implementation of crypto to help with US export regs. The NSA looks highly likely to own the second key (MS devs failed to remove the debugging information in NT4 Service Pack 5 and it was labelled as 'NSAKEY'.) The third key was supposedly a surprise to the MS folks.
#
That said, I'm not sure why you'd want me to respond along those lines given that we're talking about a UK Gov report.
- tych0 13y agoADVAPI.DLL is a microsoft thing. It's not a crypto standards thing, so my point still stands. (Restated: it is easier to attack implementations than standards.)