Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Encrypt data between Outlook and Exchange encryption levels

392 views
Skip to first unread message

WUDSTA1980

unread,
Oct 1, 2008, 7:00:07 AM10/1/08
to
Hi!

Does anyone know the encryption technology and levels used when the option
"encrypt data between microsoft office outlook and microsoft exchange" is
selected in Outlook 2003/2007

Many thanks in advance!

Missy Koslosky

unread,
Oct 4, 2008, 10:06:29 PM10/4/08
to
I believe it's DES-56, but that's based upon an old blog post -
http://blogs.msdn.com/larryosterman/archive/2005/04/19/409723.aspx - near
the bottom of the post. Larry's generally got a trustworthy memory. :)

The post is an interesting read in any case. :)

Missy

"WUDSTA1980" <WUDST...@discussions.microsoft.com> wrote in message
news:4696FBB4-7808-4125...@microsoft.com...

Elan Shudnow

unread,
Oct 5, 2008, 2:15:15 AM10/5/08
to
I believe it works as such:
RPC uses SSPI for encryption. So if you authenticate via Kerberos, it
uses Kerberos encryption. If you use NTLM, it uses NTLM encryption.
NTLM encryption utilizes DES (56-bit). Windows 2000 Kerberos used DES
while Windows 2003 can utilize RC4 (128-bits). Server 2008 (Server 2008
Forest Functional Level) supports Advanced Encryption Standard (AES)
which can support 128/256-bits.

--
Elan Shudnow
http://www.shudnow.net

"Missy Koslosky" <mi...@DONTSPAMMEmvps.org> wrote in message
news:#caBx5oJ...@TK2MSFTNGP03.phx.gbl:

Andy David {MVP}

unread,
Oct 5, 2008, 9:23:08 AM10/5/08
to
On Sun, 5 Oct 2008 06:15:15 +0000, "Elan Shudnow"
<SubstituteThis...@shudnow.net> wrote:

>I believe it works as such:
>RPC uses SSPI for encryption. So if you authenticate via Kerberos, it
>uses Kerberos encryption. If you use NTLM, it uses NTLM encryption.
>NTLM encryption utilizes DES (56-bit). Windows 2000 Kerberos used DES
>while Windows 2003 can utilize RC4 (128-bits). Server 2008 (Server 2008
>Forest Functional Level) supports Advanced Encryption Standard (AES)
>which can support 128/256-bits.


Thats the authentication piece, which isnt the same as the transfer
of data between client and server.
Up to Exchange/OUtlook 2003, it was RSA Security RC-2. Not sure about
Outlook/Exchange 2007. Outlook doesnt actually do the encryption of
course.

It should also be noted, that even without the encryption option
selected, mapi/rpc traffic is encoded.


0 new messages