Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 248183 - Last Review: March 22, 2007 - Revision: 2.5
Syskey Tool Reuses Keystream
This article was previously published under Q248183
A cryptographic error in the Syskey tool makes offline password attacks easier than previously believed. Syskey reuses keystream when encrypting certain elements in the Security Accounts Manager (SAM) database, making the tool vulnerable to an attack using a known cryptanalytic method. This vulnerability could allow offline password attacks to be mounted against a Syskey-protected SAM database.
Passwords in the SAM database are stored in hashed form to prevent a user who gains access to the database from reading the passwords. However, offline password attacks are still possible if an attacker obtains a copy of the database and is willing to devote the time needed to perform an exhaustive search of all possible passwords. The Syskey tool is designed to prevent such attacks by strongly encrypting the SAM database using 128-bit cryptography. However, a flaw in the implementation results in multiple database entries being encrypted with the same keystream. This renders the encryption susceptible to a known attack.
Windows NT Server or Workstation 4.0
To resolve this problem, obtain the individual package referenced below or obtain the Windows NT 4.0 Security Rollup Package. For additional information on the SRP, click the article number below
to view the article in the Microsoft Knowledge Base:
299444Â
(http://kbalertz.com/Feedback.aspx?kbNumber=299444/EN-US/
)
Post-Windows NT 4.0 Service Pack 6a Security Rollup Package (SRP)
The following files are available for download from the Microsoft
Download Center:
The English version of this fix should have the following file attributes or later:
Date Time Size File name Platform
-----------------------------------------------------
12/06/1999 06:52p 155,408 Lsasrv.dll x86
12/06/1999 06:53p 174,352 Samsrv.dll x86
12/06/1999 06:51p 253,712 Lsasrv.dll Alpha
12/06/1999 06:51p 290,064 Samsrv.dll Alpha
Windows NT Server 4.0, Terminal Server Edition
To resolve this problem, obtain the Windows NT Server 4.0, Terminal Server Edition, Security Rollup Package (SRP). For additional information about the SRP, click the article number below
to view the article in the Microsoft Knowledge Base:
317636Â
(http://kbalertz.com/Feedback.aspx?kbNumber=317636/EN-US/
)
Windows NT Server 4.0, TerminalServer Edition, Security Rollup Package
Windows NT Server or Workstation 4.0
Microsoft has confirmed that this problem may cause a degree of security vulnerability in Windows NT 4.0 Server and Workstation.
Windows NT Server 4.0, Terminal Server Edition
Microsoft has confirmed that this problem may cause a degree of security vulnerability in Windows NT Server 4.0, Terminal Server Edition.
For additional information about the Syskey tool, click the article number below
to view the article in the Microsoft Knowledge Base:
143475Â
(http://kbalertz.com/Feedback.aspx?kbNumber=143475/EN-US/
)
Windows NT System Key Permits Strong Encryption of the SAM
APPLIES TO
- Microsoft Windows NT Server 4.0, Terminal Server Edition
- Microsoft Windows NT Server 4.0 Standard Edition
- Microsoft Windows NT Workstation 4.0 Developer Edition
- Microsoft Windows NT Server 4.0 Enterprise Edition
| kbhotfixserver kbqfe kbbug kbfix kbgraphxlinkcritical kbqfe kbsecurity KB248183 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate
Be the first to leave feedback, to help others about this knowledge base
article.
(Optional) Name
(Optional)
Public URL Or Email
Comments
No
HTML -- Text Only Please