Syskey


SYSKEY

(cryptography, operating system, security)A utility thatencrpyts the hashed password information in a SAMdatabase using a 128-bit encryption key.

SYSKEY was an optional feature added in Windows NT 4.0 SP3.It was meant to protect against offline password crackingattacks so that the SAM database would still be secure even ifsomeone had a copy of it. However, in December 1999, asecurity team from BindView founda security hole in SYSKEY which indicates that a certain formof cryptoanalytic attack is possible offline. Abrute-force attack then appeared to be possible.

Microsoft later collaborated with BindView to issue a fix(dubbed the 'Syskey Bug') which appears to have been settledand SYSKEY pronounced secure enough to resist brute-forceattack.

According to Todd Sabin of the BindView team RAZOR, thepre-RC3 versions of Windows 2000 were also affected.

BindView Security Advisory.

BindView press release.

Microsoft bulletin.

Syskey

(SYStem KEY) The Windows function that encrypts the data in the Security Accounts Manager (SAM) database. The encryption key is stored locally. Syskey Mode 1 is automatic, and the computer reads the key on startup. Mode 2 requires the key to be typed in by the user at startup, while Mode 3 requires the key to be entered from external media such as a USB drive. See SAM.