David LeBlanc's Web Log : December 2008

CVE Count and Statistics: Larry Seltzer had some interesting comments on my post about the rate of Office vulnerabilities at Vulnerabilities and Office Versions There may be a little flaw in the analysis in that LeBlanc studied reports during the period from 9/18/2007 to 11/17/2008. Read More...
Posted 08 December 08 02:04 by david_leblanc | 1 Comments
Filed under Security Misc, Vulns
Office Crypto KDF Details: I've gotten a couple of questions asking how our key derivation function works. The technique is very similar to that described in RFC 2898, also known as PKCS #5. There are two key derivation functions (KDF) documented in this RFC – PBKDF1 and PBKDF2. Read More...
Posted 05 December 08 03:08 by david_leblanc | 0 Comments
Filed under Office Crypto
New, Improved Office Crypto: If you're enough of an Office crypto geek to stay on top of the most recent changes in MS-OFFCRYPTO, you already know about some of this, but my assumption is that most people aren't going to want to parse something that hard to read. What we're doing Read More...
Posted 04 December 08 05:39 by david_leblanc | 2 Comments
Filed under Office Crypto

David LeBlanc's Web Log