Wired query on Windows 2000 and DES/3DES (fwd)

[Tina Bird]

Hi all --

There's been a fascinating discussion on the IPsec
list for the last week or two about the behavior
of Win2K encryption for IPsec...the attached
article includes links to most of the conversation.

The basic problem is that a default configuration of
IPsec can use single DES encryption despite the administrator
having selected 3DEC on both endpoint systems -- with
nothing but an audit log message to indicate the
downgraded key length.

---------- Forwarded message ----------
Date: Tue, 16 May 2000 09:02:28 -0400
From: Declan McCullagh <declan at wired.com>
To: ipsec at lists.tislabs.com
Subject: Re: Wired query on Windows 2000 and DES/3DES

My article is here:

http://www.wired.com/news/technology/0,1282,36336,00.html

Thanks, all for the help.

-Declan

VPN is sponsored by SecurityFocus.COM