Flame malware incident causes Microsoft to revamp Windows encryption keys


Granted it’s reactive instead of proactive but looks like a good move by Microsoft.

Starting next month, updated Windows operating systems will reject encryption keys smaller than 1,024 bits, which could cause problems for customer applications accessing websites and email platforms that use the keys.

Image representing Windows as depicted in Crun...

Image via CrunchBase

The cryptographic policy change is part of Microsoft’s response to security weaknesses that came to light after Windows Update became an unwitting party to Flame Malware attacks, and affects Windows XP, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 operating systems, according to the Windows PKI blog written by Kurt L. Hudson, a senior technical writer for the company.

“To prepare for this update, you should determine whether your organization is currently using keys less than 1,024 bits,” Hudson writes. “If it is, then you should take steps to update your cryptographic settings such that keys under 1,024 bits are not in use.”

Source: Microsoft to revamp Windows encryption keys in face of Flame malware | Microsoft Windows – InfoWorld.

Advertisements

About brvanlanen

Just a thirty-something guy currently hanging it up in the greater Green Bay area. My post-high school educational background is mainly in the Information Technology field. Specifically I have an A.A.S. in Computer Network Systems and a B.S. in Information Systems Security, both from ITT Technical Institute, in addition to A and MCDST certifications. In my free time I enjoy spending time with my family, cooking and sports. My Christian faith is also important to me as a Missouri-Synod Lutheran and all my children attend a Lutheran grade school. When it comes to political leanings I am a conservative first and foremost which you will discover rather quickly. As for sports I am a huge fan of the Green Bay Packers.

Posted on July 12, 2012, in Encryption, malware, Microsoft, Windows and tagged , , , , , , , . Bookmark the permalink. Comments Off on Flame malware incident causes Microsoft to revamp Windows encryption keys.

Comments are closed.

%d bloggers like this: