From: Marc Horowitz <marc@cygnus.com>
Date: Tue, 17 Dec 1996 22:14:14 -0800 (PST)
To: roy@scytale.com
Subject: Re: [NOT NOISE] Microsoft Crypto Service Provider API
In-Reply-To: <961217.193402.3q9.rnr.w165w@sendai.scytale.com>
Message-ID: <t53u3pkpehe.fsf@rover.cygnus.com>
MIME-Version: 1.0
Content-Type: text/plain


roy@sendai.scytale.com (Roy M. Silvernail) writes:

>> I just got my copy of the Microsoft Cryptographic Service Provider
>> Development Kit, Version 1.0.  It appears to support only Windows NT.  A
>> first glance reveals no built-in GAK (but I haven't examined it closely
>> yet!).

You're right, you haven't looked at it closely.  Although it doesn't
have Key Escrow, new cryptosystems can only be added if they are
signed by a private key held by Microsoft.  Of course, Microsoft has
agreed with the State Dept. to sign only export-"strength" crypto.

		Marc