Re: DES, 3DES and AES-256 on WindowsXP EFS...how?!?

From: David Cross [MS] (dcross@online.microsoft.com)
Date: 03/05/03 

From: "David Cross [MS]" <dcross@online.microsoft.com>
Date: Wed, 5 Mar 2003 06:44:38 -0800

This is documented in the EFS whitepaper and help files. Windows XP with
Service Pack 1 uses AES 256 as the default. If you want to use 3DES, you
have to set a local or group policy to enable FIPS mode algorithm. 

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Markus Jansson" <jansson_markus@ziplip.com> wrote in message
news:1103_1046874422@msnews.microsoft.com...
> I dont understand this. I just read a paper from MS that says
> that WindowsXP SP1 uses by default AES-256 for EFS. Then
> it sayes that if you want 3DES, you should enable "use FIPS
> complient blahblahblah".
>
> OK, OK, OK.... HOW can I use AES-256 for EFS? How can
> I use 3DES for EFS? How can I use DES for EFS? I dont get
> it. I just dont get it. :(
>
>
>
> --
> Markus Jansson eduskuntaan.
> Liberaalit rp, Varsinais-Suomi #42.
> Nuorekas vaihtoehto nykypolitiikalle!
> http://www.markusjansson.net/vaali.html
>
>

Relevant Pages

  • Re: decryption without a password key
    ... EFS relies on the account credentials. ... key, even you maybe, but people dont wanna talk about that because ... Best practices for the Encrypting File System ... in Windows Server 2003, in Windows 2000, and in Windows XP ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Re[2]: Encryption on Laptops?
    ... attack that Bart described is indeed possible - but only on Windows 2000 ... I don't see any reason to conclude that EFS is inherently a weak solution. ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ...
    (Security-Basics)
  • Re: Passwords on Folders
    ... > you to use passwords on folders? ... Windows NT/2000/XP do not natively let you set passwords on folders. ... Windows under which those permissions were defined. ... use NTFS on your hard drives so you can then EFS ...
    (microsoft.public.win2000.security)
  • Re: EFS Decryption Problem
    ... hard drive is running the old instance of Windows under which the EFS ... Or did you install a new instance of Windows ... The username is irrelevant to EFS. ... the EFS certificate and save it on removable media (floppy, CD, thumb ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS Certificate Needed
    ... Backup and save on non-degrading media the EFS DRA .pfx file ... Foe sure I will follow "Windows Recommendations". ... that recovery agent will only have ... Best practices for the Encrypting File System ...
    (microsoft.public.security)