Protected storage (PStore) uses a lower-quality cryptographic function when the system locale is set to French (France) on a Microsoft Windows-based computer

Article ID: 955417 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Protected storage (PStore) uses a lower-quality cryptographic function when the system locale is set to French (France) on a Microsoft Windows-based computer. Data Protection API (DPAPI) functions are not affected.
Back to the top | Give Feedback

CAUSE

This issue occurs because Microsoft implemented the PStore feature in Windows during the 1990s when French law prohibited the supply of products that contain encryption capabilities without prior authorization from the French government. The French review process was very detailed and would have led to a significant delay for the release of Windows in France. To make sure that the product was available to the French market in a synchronized manner with all locales, Microsoft chose to disable the encryption of Protected Storage by using a single, fixed encryption key for the French locale. With the relaxation of French encryption regulations late in 1999, the fixed encryption key for PStore is no longer necessary for the French locale. However, the fixed encryption key has not been removed from PStore.
Back to the top | Give Feedback

RESOLUTION

To resolve the issue in which PStore uses a lower-quality cryptographic function when the system locale is set to French (France), install this update. This update brings the protection level of the French locale to parity with all localized versions of Windows. The specific French local check is removed from PStore, and the contents are automatically reencrypted with a new, random key.

Notes
  • If you uninstall this update and then reinstall this update, the data that is written to the PStore in the duration between uninstall and the reinstall remains encrypted by using the fixed encryption key. The data is not automatically reencrypted with a new random key until and unless it is read again after the reinstallation.
  • The use of PStore in general has been deprecated, and developers are encouraged to use the stronger data protection that is provided by the CryptProtectData function and by the CryptUnprotectData function.

    For information about the CryptProtectData function, please visit the following MSDN Web site:
    http://msdn.microsoft.com/en-us/library/aa380261(VS.85).aspx
    (http://msdn.microsoft.com/en-us/library/aa380261(VS.85).aspx)
    For information about the CryptUnprotectData function, please visit the following MSDN Web site:
    http://msdn.microsoft.com/en-us/library/aa380882(VS.85).aspx
    (http://msdn.microsoft.com/en-us/library/aa380882(VS.85).aspx)
The following files are available for download from the Microsoft Download Center:

Update for Windows XP (KB955417)
Collapse this imageExpand this image
Download
Download the WindowsXP-KB955417-x86-ENU.exe package now.
(http://www.microsoft.com/downloads/details.aspx?FamilyID=c99e2424-d5d8-4828-8133-3451ed66a7e1&DisplayLang=en)


Update for Windows 2000 (KB955417)
Collapse this imageExpand this image
Download
Download the Windows2000-KB955417-x86-ENU.EXE package now.
(http://www.microsoft.com/downloads/details.aspx?FamilyID=7ed3844b-555b-4e8e-bd66-5d5b3eb38df9&DisplayLang=en)


Update for Windows XP x64 Edition (KB955417)
Collapse this imageExpand this image
Download
Download the WindowsServer2003.WindowsXP-KB955417-x64-ENU.exe package now.
(http://www.microsoft.com/downloads/details.aspx?FamilyID=0c1dd091-da8a-419c-b0ba-2146ea58e3b0&DisplayLang=en)


Update for Windows Server 2003 (KB955417)
Collapse this imageExpand this image
Download
Download the WindowsServer2003-KB955417-x86-ENU.exe package now.
(http://www.microsoft.com/downloads/details.aspx?FamilyID=3f628213-bb71-47a9-ae2a-79c235aafa6e&DisplayLang=en)


Update for Windows Server 2003 x64 Edition (KB955417)
Collapse this imageExpand this image
Download
Download the WindowsServer2003.WindowsXP-KB955417-x64-ENU.exe package now.
(http://www.microsoft.com/downloads/details.aspx?FamilyID=8651346e-9885-4253-8f56-62f56d34afd4&DisplayLang=en)


Update for Windows Server 2003 for Itanium-based Systems (KB955417)
Collapse this imageExpand this image
Download
Download the WindowsServer2003-KB955417-ia64-ENU.exe package now.
(http://www.microsoft.com/downloads/details.aspx?FamilyID=673f7021-e0f8-4ed2-b58f-24cc3cfb9d46&DisplayLang=en )


Release Date: August 4, 2008

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591
(http://support.microsoft.com/kb/119591/ )
How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Back to the top | Give Feedback

Properties

Article ID: 955417 - Last Review: August 22, 2008 - Revision: 2.0
APPLIES TO
  • Microsoft Windows Server 2003 Service Pack 1, when used with:
    • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
    • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
    • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
    • Microsoft Windows Server 2003, Web Edition
    • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
    • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows XP Professional x64 Edition
  • Microsoft Windows Server 2003 Service Pack 2, when used with:
    • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
    • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
    • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
    • Microsoft Windows Server 2003, Web Edition
    • Microsoft Windows Server 2003, Datacenter x64 Edition
    • Microsoft Windows Server 2003, Enterprise x64 Edition
    • Microsoft Windows Server 2003, Standard x64 Edition
    • Microsoft Windows XP Professional x64 Edition
    • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
    • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows XP Service Pack 2, when used with:
    • Microsoft Windows XP Home Edition
    • Microsoft Windows XP Professional
  • Microsoft Windows XP Service Pack 3, when used with:
    • Microsoft Windows XP Home Edition
    • Microsoft Windows XP Professional
  • Microsoft Windows 2000 Service Pack 4, when used with:
    • Microsoft Windows 2000 Advanced Server
    • Microsoft Windows 2000 Datacenter Server
    • Microsoft Windows 2000 Professional Edition
    • Microsoft Windows 2000 Server
Keywords: 
atdownload kbqfe kbexpertiseinter KB955417
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top