Microsoft CryptoAPI CSP Availability

Microsoft CryptoAPI CSP Availability

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Microsoft CryptoAPI CSP Availability Kristen Benjamin 06-16-2006
Posted by Kristen Benjamin on June 16, 2006, 2:05 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I recently bought a laptop that has Windows XP Professional SP2. I was
surprised to discover that algorithms under Outlook didn't include SHA1 or
3DES, which seem to be the minimum 'lingua franca' for strong crypto. I
looked up the suported algorithms in the CryptoAPI, and found reference to
additional CSPs (MS Strong Cryptograpjic Provider, Enhanced Crpytographic
Provider, etc). I vaguely remember having to load a "High Encryption
DIskette" back under Windows 2000, but there doesn't seem to be any
reference to an equivalent product for XP.

Do these CSPs actually exist? Microsoft tech support seems to be unaware of
the entire topic.

Does anybody have some useful pointers for these, or some other way that I
can add SHA1 and 3DES support to my laptop for less that a small fortune?

Thanks!

Kristen





Posted by Steven L Umbach on June 16, 2006, 2:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I don't use Outlook myself but acording to Microsoft Outlook can use 3DES
for Outlook 2002 and newer. Maybe you are using an old version of Outlook.
You may also want to post in the appropriate Outlook newsgroup. --- Steve

http://support.microsoft.com/?id=307472

SUMMARY
By default, Microsoft Outlook 2002 defaults to 40-bit (RC2-40) encryption
when another encryption algorithm is not available. If you configure Outlook
to default to 168-bit (3DES) encryption instead, and then you send a message
to an e-mail client that does not support that encryption algorithm, the
recipient is unable to read the message

>I recently bought a laptop that has Windows XP Professional SP2. I was
> surprised to discover that algorithms under Outlook didn't include SHA1 or
> 3DES, which seem to be the minimum 'lingua franca' for strong crypto. I
> looked up the suported algorithms in the CryptoAPI, and found reference to
> additional CSPs (MS Strong Cryptograpjic Provider, Enhanced Crpytographic
> Provider, etc). I vaguely remember having to load a "High Encryption
> DIskette" back under Windows 2000, but there doesn't seem to be any
> reference to an equivalent product for XP.
>
> Do these CSPs actually exist? Microsoft tech support seems to be unaware
> of
> the entire topic.
>
> Does anybody have some useful pointers for these, or some other way that I
> can add SHA1 and 3DES support to my laptop for less that a small fortune?
>
> Thanks!
>
> Kristen
>
>
>
>



Posted by Kristen Benjamin on June 19, 2006, 4:08 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> I don't use Outlook myself but acording to Microsoft Outlook can use 3DES
> for Outlook 2002 and newer. Maybe you are using an old version of Outlook.
> You may also want to post in the appropriate Outlook newsgroup. --- Steve
>
> http://support.microsoft.com/?id=307472
>
> SUMMARY
> By default, Microsoft Outlook 2002 defaults to 40-bit (RC2-40) encryption
> when another encryption algorithm is not available. If you configure
Outlook
> to default to 168-bit (3DES) encryption instead, and then you send a
message
> to an e-mail client that does not support that encryption algorithm, the
> recipient is unable to read the message
>

Steve:

Thanks for the input. Perhaps I should ask in an Outlook group. It just
didn't SEEM like an Outlook problem since I'm using the same version of
outlook at work on a different version of the OS (Windows 2000) and that
works great.

I'm running Outlook 2002, btw, if that's important.

/Kristen



Similar ThreadsPosted
CryptoAPI CSP Availability May 19, 2006, 10:10 am
High Availability on a CLM Managed PKI January 24, 2008, 9:59 am
MS CryptoAPI: HMAC using PLAINTEXTKEYBLOB May 15, 2006, 2:02 am
Microsoft Takes on Google and Yahoo with Microsoft Adcenter and Adlabs May 7, 2007, 4:14 pm
Microsoft copy-cat - comments from Microsoft staff requested. October 29, 2008, 6:22 am
The Microsoft Internet Explorer Weblog The Microsoft Internet Explorer Weblog IEBlog June 4, 2007, 5:52 pm
Microsoft EFS September 20, 2006, 9:55 am
Re: Can Microsoft be trusted? October 4, 2005, 3:06 am
Re: Can Microsoft be trusted? October 4, 2005, 7:15 am
Re: Can Microsoft be trusted? October 5, 2005, 12:02 pm

The site map in XML format XML site map

Contact Us | Privacy Policy