Syskey
SYSKEY
(cryptography, operating system, security)SYSKEY was an optional feature added in Windows NT 4.0 SP3.It was meant to protect against offline password crackingattacks so that the SAM database would still be secure even ifsomeone had a copy of it. However, in December 1999, asecurity team from BindView founda security hole in SYSKEY which indicates that a certain formof cryptoanalytic attack is possible offline. Abrute-force attack then appeared to be possible.
Microsoft later collaborated with BindView to issue a fix(dubbed the 'Syskey Bug') which appears to have been settledand SYSKEY pronounced secure enough to resist brute-forceattack.
According to Todd Sabin of the BindView team RAZOR, thepre-RC3 versions of Windows 2000 were also affected.
BindView Security Advisory.
BindView press release.
Microsoft bulletin.