The NSAKEY in microsoft's crypto API: facts, fiction and speculation

Andrew Fernandes' announcement: http://www.cryptonym.com/hottopics/msft -nsa.html and FAQ: http://www. cryptonym.corn/hottopics/msft-nsa/ faq.html. BruceSchneier'sanalysis:http:// www.counterpane.com/crypto-gram-9909. html#NSAKeyinMicrosoftCryptoAPI. Demo of _NSAKEY replacement: http:// www.cryptonym.com/hottopics/msft-nsa/ ReplaceNsaKey.zip. MS statement: http://www.microsoft.com/ presspass/press/1999/sept99/rsapr.htm and amplified at:http://www.microsoft.com/ security/bulletins/backdoor.asp. Brian Gladman on CryptoAPI signing arrangements: http://jya.com/msnsanot.htm. Peter Wayner's New York Times article: http://www.nytimes.com/library/tech/99/0 9/cyber/articles/04soft-side.html also archived at http: //jya.com/msnsa.htm#peter. US BXA on September 1999 revisions to export policy: http://www.bxa.doc.gov/ Encryption/q&a99.htm.