Microsoft _NSAKEY is a signing key found in Microsoft's CryptoAPI since Windows 95. Many claimed this was the ultimate backdoor for the National Security Agency. But is this a hoax, or is the _NSAKEY a real backdoor in Microsoft Windows?
A British researcher discovered that Microsoft was cryptographically signing its CryptoAPI with two keys. This means two separate entities could approve software running inside Windows. One of those entities was Microsoft. The identity of the other one remained a mystery.
But then Microsoft shipped a Service Pack 5 for WindowsNT4. Somebody down the chain of command at Microsoft forgot to remove information revealing the true identity of both of the signing keys. Chief security scientist at Ontario-based Cryptonym Andrew Fernandes found the names of the two keys. One was simply called “_KEY”. And the other was “_NSAKEY”.
Sources
News coverage
https://www.wired.com/1999/09/ms-deni...
https://archive.nytimes.com/www.nytim...
https://archive.nytimes.com/www.nytim...
http://us.cnn.com/TECH/computing/9909...
http://edition.cnn.com/TECH/computing...
http://news.bbc.co.uk/2/hi/sci/tech/4...
https://www.computerworld.com/article...
Security experts & opinions
https://web.archive.org/web/200006171...
https://www.schneier.com/crypto-gram/...
https://www.heise.de/tp/features/How-...
http://www.stat.rice.edu/~dobelman/ks...
https://cryptome.org/nsakey-ms-dc.htm
Other
Code is speech https://www.eff.org/deeplinks/2015/04...
Microsoft NSA cooperation on mass surveillance
https://www.theguardian.com/world/201...
https://theintercept.com/2014/06/17/g...
Credits:
CO.AG Music https://www.youtube.com/channel/UCcav...
The footage and images featured in the video were for critical analysis, commentary and parody, which are protected under the Fair Use laws of the United States Copyright act of 1976.
