You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
weak encryption
About this tag
Weak encryption refers to cryptographic methods that are insufficient to protect data from determined attackers. On WindowsForum.com, discussions highlight historical incidents where weak encryption keys, such as 512-bit RSA keys, have been exploited. For example, a Microsoft Security Advisory detailed how fraudulent digital certificates with weak keys could enable spoofing, phishing, and man-in-the-middle attacks. These vulnerabilities affect all supported Windows releases and underscore the importance of using strong encryption standards. Users seeking information on weak encryption will find threads covering security advisories, certificate authority failures, and best practices for mitigating risks associated with outdated or insufficient cryptographic algorithms.
Revision Note: V1.0 (November 10, 2011): Advisory published.
Summary: Microsoft is aware that DigiCert Sdn. Bhd, a Malaysian subordinate certification authority (CA) under Entrust and GTE CyberTrust, has issued 22 certificates with weak 512 bit keys. These weak encryption keys, when...