Maximum cryptographic protection: Microsoft refuses weak RSA keys

Teacher

Professional
Messages
2,673
Reputation
9
Reaction score
692
Points
113
New data protection standards take Windows security to the next level.

Microsoft is strengthening Windows security by officially announcing the end of support for RSA keys with a length of less than 2048 bits in upcoming updates to the operating system. This solution aims to increase the security of TLS server authentication by blocking outdated or potentially malicious websites and applications.

In recent years, the company has actively informed users about important TLS updates in an effort to make Windows more secure. So, in September last year, Microsoft announced the termination of support for TLS 1.0 and 1.1 in both Windows and Azure Storage Accounts, emphasizing the importance of these measures for user security.

In the latest security update, Microsoft notes that support for certificates with RSA keys less than 2048 bits long will be discontinued, as current security standards and regulatory recommendations strongly advise using RSA keys at least 2048 bits long. This transition will provide a significant improvement in the level of protection compared to 1024-bit keys, offering greater cryptographic reliability.

TLS certificates issued by corporate or test certificate authorities are not affected by this change, but the company still recommends switching to 2048 bits as a best security practice.

In addition to TLS and RSA-related updates, Microsoft also plans to improve Windows security in a number of other ways, including updating Secure Boot keys inherited from Windows 8, and possibly introducing TPM-like security chips, such as Pluton. In addition, the Windows kernel will receive future improvements to improve memory security by using the Rust programming language.
 
Top