Re:Jeff Atwood's security blunder regarding email
by yuhong on Monday April 30, 2012 @12:20AM
(#3908016)
There was two RC4 keystream reuse flaws in the Office binary formats. One involved salt reuse on save (an implementation bug) and was fixed in Office 2007. But there is still another one that can't be fixed without changing the file format. The original Office 2007 file formats used AES-ECB, but later switched to CBC in SP2.
[ Parent
| on HN ]
There are no comments on this comment yet.