![]() |
Security Information Week 35, 1999
In week 35 a report of a new backdoor in Microsoft's operating systems Windows 95, 98, NT and the beta version of Windows 2000 was published. A press release was published by the Canadian security company Cryptonym Corporation's chief analyst Andrew Fernades. This press release states that Microsoft may have introduced a backdoor which enables the National Security Agency (NSA) in the USA to access computers running these Windows operating systems.
There happens to be a key in Microsoft's cryptography API (CryptoAPI) named _NSAKEY, which is crucial in this speculation.
According to Microsoft this key is added only to comply with US' restrictions for exporting encryption software.
After the report was published a lot of speculation arised. Here are some interesting articles and comments:
- The security expert Bruce Schneier from Counterpane Systems who states that he does not believe this conspiracy theory.
- Microsoft's Security Bulletin addressing this issue
- NTbugtraq's Ross Cooper who concludes that this matter is "over-hyped".
- Wired news article MS denies Windows 'Spy Key'.
- Wired news article Debate flares over MS 'Spy Key'.
Per Olav Førland
