Microsoft cryptographer denies Vista back door

A senior cryptographer working for Microsoft has vehemently denied that the firm is planning to compromise the encryption functionality incorporated in its forthcoming Vista operating system by adding a backdoor.

Niels Ferguson, a Dutch cryptographic engineer and consultant who currently works for Microsoft, has written in his blog that there are no plans to provide a secret means for law enforcement officers to access encrypted data. 

He added that, if pressure came for such a system, Microsoft engineers would either go public or withdraw the platform's encryption feature altogether.

"Over my dead body," he wrote in answer to the backdoor accusations. "Well, maybe not literally. I'm not ready to be a martyr quite yet, but certainly not in any product I work on. And I'm not alone in that sentiment. The official line from high up is that we do not create back doors."

Ferguson did say that Microsoft is answering law enforcement's questions about the new operating system, saying that the Vista key system known as BitLocker was a case in point.

Police need to know to look for all USB thumb drives as well as computers when making a raid, said Ferguson.

"Like any security technology BitLocker has its avenues of attack, and law enforcement should know about them," he continued.

Ferguson is a well respected figure within the computer community and co-wrote Practical Cryptography with Bruce Schneier.

But suspicions remain that some sort of a deal could have been done. Microsoft has been accused of shipping backdoors into Windows NT4 and 2000 that would allow the National Security Agency (or No Such Agency as it is nicknamed in Washington) to access any Microsoft system without informing senior managers.

See also:

Microsoft verifies Vista versions

More than six flavours to handle this 'world of more'  27 Feb 2006

Microsoft slams Vista virus report

Problem reported by F-Secure is 'non-existent'  08 Aug 2005

Windows Vista already under virus attack?

Proof-of-concept code exploits upcoming MSH scripting technology  05 Aug 2005

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!