How LMCompatibilityLevel really works

Save Your Exchange Password in Microsoft Outlook 2003/2007

Save Your Exchange Password in Microsoft Outlook 2003/2007 — Wed, 06 May 2009 17:14:11 GMT

PingBack from http://www.petri.co.il/save-your-exchange-password-in-microsoft-outlook-2003-or-2007.htm

How LMCompatibilityLevel really works | Secure Software Engineering Blog

How LMCompatibilityLevel really works | Secure Software Engineering Blog — Sun, 02 Mar 2008 22:21:13 GMT

PingBack from http://www.secure-software-engineering.com/2008/03/02/how-lmcompatibilitylevel-really-works/

re: How LMCompatibilityLevel really works

Alun Jones — Tue, 01 Aug 2006 19:44:40 GMT

Someone reminded me the other day that I should revisit this just to emphasise that this is not "Microsoft screwing up the standards".
MD4 hashes are hashes of binary data, not strings, and as such, there is nothing to state whether or not a terminating NULL should be included, prior to calculating the hash.
Microsoft has a renewed interest in standards and interoperability, which can only be a good thing.

re: How LMCompatibilityLevel really works

Alun Jones — Fri, 28 Jul 2006 17:24:55 GMT

Ever the burden of the network developer, and particularly the crypto network developer, to get agreement between sender and recipient as to what the binary representation of an object is. You have no idea (but can probably guess) how often this sort of error pops up in badly written software to poorly documented standards, as people disagree on padding, termination, delimiters, size counts, and connection durations.
A good protocol document would define these terms explicitly.

re: How LMCompatibilityLevel really works

Sean Krulewitch — Fri, 28 Jul 2006 00:02:23 GMT

Finally an accurate and definitive description of LMCompatibilityLevel and NTLMv2 Session Security from a trusted Microsoft source!