file encryption questions

  • Thread starter Thread starter Mike I
  • Start date Start date
M

Mike I

When i select a file and click advanced to encrypt, it gives me a warning
about how i should encrypt the parent directory b/c the file could be
copied/modified and encryption removed. What exactly needs to happen in
order for someone to decrypt the file and open/modify it?

Also, what level of encryption is performed on the file (similar AES, 3DES,
MD5)?

Thanks,

--minnoce944
 
Any account that is properly logged into and that has the
decryption key loaded into it will be able to open the file
in the clear. Similarly, any account with the DRA decryption
key, if you have defined and configured a DRA, will be able
to open the file in the clear.
XP Sp1 uses AES 256
 
Thanks for the help. i tried to enable 3des but it totally screwed up my
system so i had to leave things alone for now.

Found this in the MS KB

http://support.microsoft.com/default.aspx?scid=kb;en-us;811834

--minnoce944


Drew Cooper said:
True for XP RTM. XP SP1 defaults to AES 256, though.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Colin Nash said:
It uses DESX, a modified version of DES. It can optionally be
Click to expand...
configured
to
use 3DES.
Click to expand...
http://www.microsoft.com/resources/...windows/xp/all/reskit/en-us/prnb_efs_ijvx.asp
Click to expand...
 
This KB has EFS-specific algo selection registry settings listed. Unlike
the FIPs settings, nobody but EFS will notice the change. If you really
want 3DES, that should work.
http://support.microsoft.com/default.aspx?scid=kb;en-us;329741&sd=tech
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Mike I said:
Thanks for the help. i tried to enable 3des but it totally screwed up my
system so i had to leave things alone for now.

Found this in the MS KB

http://support.microsoft.com/default.aspx?scid=kb;en-us;811834

--minnoce944


Drew Cooper said:
True for XP RTM. XP SP1 defaults to AES 256, though.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Colin Nash said:
It uses DESX, a modified version of DES. It can optionally be
Click to expand...
configured
to
use 3DES.
Click to expand...
Click to expand...
http://www.microsoft.com/resources/...windows/xp/all/reskit/en-us/prnb_efs_ijvx.asp
Click to expand...
 
Back
Top