smartcard PKI unlock, XP SP2

[Guest]

PKI logon delay,

When unlock the XP workstation using a smartcard (PKI unlock), we notice a
performance issue on SP2. According to our tests, the average 'unlock timing'
within CSP calls:

- on SP1 is 3,9s

- on SP2 is 8,6s



Analyzing our logs we find out the number of signature required by Windows
is depending of the Windows Service Pack: 3 more signatures on SP2.

- on SP2 : 4 signatures and 1 decryption.

- on SP1 : 1 signature and 1 decryption.


We need to know the reason of this change (configuration, security, ...) of
the difference between SP1 and SP2.

thanks in advanced

 

[David H. Lipman]

From: "logeor" <[email protected]>

| PKI logon delay,
|
| When unlock the XP workstation using a smartcard (PKI unlock), we notice a
| performance issue on SP2. According to our tests, the average 'unlock timing'
| within CSP calls:
|
| - on SP1 is 3,9s
|
| - on SP2 is 8,6s
|
| Analyzing our logs we find out the number of signature required by Windows
| is depending of the Windows Service Pack: 3 more signatures on SP2.
|
| - on SP2 : 4 signatures and 1 decryption.
|
| - on SP1 : 1 signature and 1 decryption.
|
| We need to know the reason of this change (configuration, security, ...) of
| the difference between SP1 and SP2.
|
| thanks in advanced

Here's the place to ask....
microsoft.public.security.crypto