As if Vista had not managed to garner enough bad press on its own. Bruce Schneier reported yesterday that Microsoft has reintroduced its dual random number generator. This time in Vista SP1. That is the same as one he had written about previously. The catch is that, according to Schneier, this potentially provides an NSA back door. This is disabled by default. However, that is no guarantee that it won’t switched to the “on” position in a later patch release.
[tags]DRNG, Backdoors, Bruce Schneier, Microsoft Security[/tags]