Microsoft to revamp Windows encryption keys in face of Flame malware

Starting next month, updated Windows operating systems will reject encryption keys smaller than 1,024 bits, which could cause problems for customer applications accessing websites and email platforms that use the keys.

The cryptographic policy change is part of Microsoft's response to security weaknesses that came to light after Windows Update became an unwitting party to Flame Malware attacks, and affects Windows XP, Windows Server 2003, Windows Server 2003 R2, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 operating systems, according to the Windows PKI blog written by Kurt L. Hudson, a senior technical writer for the company.

"To prepare for this update, you should determine whether your organization is currently using keys less than 1,024 bits," Hudson writes. "If it is, then you should take steps to update your cryptographic settings such that keys under 1,024 bits are not in use." Read more...