|
Syskey is a utility that encrypts the hashed password information in a SAM database in a Windows system using a 128-bit RC4 encryption key. By default, the SYSKEY encryption key is hidden in the Windows registry. But it can also be configured to require a startup password or an external storage (floppy disk, USB flash drive). SYSKEY was an optional feature added in Windows NT 4.0 SP3. It was meant to protect against offline password cracking attacks by preventing the possessor of an unauthorised copy of the SAM from extracting information from it. However, the feature is misused by phone line scammers and other criminals to lock the computers of naïve victims. ==Early vulnerability== In December 1999, a security team from BindView found a security hole in Syskey that indicated that a certain form of offline cryptanalytic attack is possible, making a brute force attack appear to be possible. Microsoft later collaborated with BindView to issue a fix for the problem (dubbed the 'Syskey Bug') which appears to have been settled; Syskey was pronounced secure enough to resist brute force attack. According to Todd Sabin of the BindView team RAZOR, the pre-RC3 versions of Windows 2000 were also affected. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Syskey」の詳細全文を読む スポンサード リンク
|