VULHUB ™

nCipher produces a range of hardware and software security products. An issue has been reported in version 5.50 of the install wizard for the MSCAPI CSP key generator under Windows 2000. Under some circumstances, a key generated that should be protected by an Operator card will in fact be generated as only module protected. This may result in weaker security than anticipated, and under some deployments reduce or break the security model. ** It has been reported that a similar issue exists in the command line utility 'domesticinstall.exe' included with versions 5.50 and 5.54.

nCipher produces a range of hardware and software security products. An issue has been reported in version 5.50 of the install wizard for the MSCAPI CSP key generator under Windows 2000. Under some circumstances, a key generated that should be protected by an Operator card will in fact be generated as only module protected. This may result in weaker security than anticipated, and under some deployments reduce or break the security model. ** It has been reported that a similar issue exists in the command line utility 'domesticinstall.exe' included with versions 5.50 and 5.54.