How to Determine If You Have 128-Bit or 56-Bit Encryption for SSL/TLS (255754)



The information in this article applies to:

  • Microsoft Windows 2000 Server SP1
  • Microsoft Windows 2000 Advanced Server SP1
  • Microsoft Windows 2000 Professional SP1
  • Microsoft Windows NT Workstation 4.0
  • Microsoft Windows NT Server 4.0

This article was previously published under Q255754

SUMMARY

When you implement data encryption, you must determine if you have 56-bit low encryption or 128-bit high encryption. To do so, right-click the Schannel.dll file in Windows Explorer, click Properties, and then click the Version tab.

If the description is "PCT / SSL Security Provider (Export Version)" you have 56-bit encryptions. If the description is "TLS / SSL Security Provider (US/Canada Only, Not for Export)" it is 128-bit encryption.

MORE INFORMATION

The Schannel.dll file is the primary dynamic-link library (DLL) responsible for establishing a secure channel with SSL or Transport Layer Security (TLS).

You must figure out the encryption strength from the computer's configuration. You cannot obtain the bit strength used for encryption out of a X509 V3 certificate that is used to encrypt data.

Modification Type:MajorLast Reviewed:5/14/2003
Keywords:kbenv kbinfo KB255754