.
/v3-uk/news/1995941/microsoft-cryptographer-denies-vista-door
07 Mar 2006, Iain Thomson , V3
A senior cryptographer working for Microsoft has vehemently denied that the firm is planning to compromise the encryption functionality incorporated in its forthcoming Vista operating system by adding a backdoor.
Niels Ferguson, a Dutch cryptographic engineer and consultant who currently works for Microsoft, has written in his blog that there are no plans to provide a secret means for law enforcement officers to access encrypted data.
He added that, if pressure came for such a system, Microsoft engineers would either go public or withdraw the platform's encryption feature altogether.
"Over my dead body," he wrote in answer to the backdoor accusations. "Well, maybe not literally. I'm not ready to be a martyr quite yet, but certainly not in any product I work on. And I'm not alone in that sentiment. The official line from high up is that we do not create back doors."
Ferguson did say that Microsoft is answering law enforcement's questions about the new operating system, saying that the Vista key system known as BitLocker was a case in point.
Police need to know to look for all USB thumb drives as well as computers when making a raid, said Ferguson.
"Like any security technology BitLocker has its avenues of attack, and law enforcement should know about them," he continued.
Ferguson is a well respected figure within the computer community and co-wrote Practical Cryptography with Bruce Schneier.
But suspicions remain that some sort of a deal could have been done. Microsoft has been accused of shipping backdoors into Windows NT4 and 2000 that would allow the National Security Agency (or No Such Agency as it is nicknamed in Washington) to access any Microsoft system without informing senior managers.
Do you agree?
Back door is unlikely
I am willing to believe Niels Ferguson's resolute rejection of a back door for Vista's encryption facility. But beyond that virtuous objection is the simple fact that Microsoft would face a incalculable financial liability should such a back door be exposed -- and it would be (eventually) exposed if it existed. It seems to me more likely that MS, for its own well-being, would rigorously try to prevent the introduction, whether maliciously or inadvertently, of a back door into Vista (or any of its encrytpion products).
Posted by DaveC, 07 Mar 2006