DOCUMENT:Q176820  10-AUG-2001  [winnt]
TITLE   :Differences Between 128-bit and 40-bit versions of SP3 & SP4
PRODUCT :Microsoft Windows NT
PROD/VER:winnt:4.0
OPER/SYS:
KEYWORDS:

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Windows NT Workstation version 4.0 
 - Microsoft Windows NT Server version 4.0 
 - Microsoft Windows NT Server, Enterprise Edition 
-------------------------------------------------------------------------------

SUMMARY
=======

How to identify differences between the exportable and non-exportable (strong
crypto) versions of Windows NT system files.

MORE INFORMATION
================

Because of US government regulations that restrict the export of software
containing strong (128-bit) cryptographic algorithms, Microsoft produces two
versions of the North American English service packs. One which implements
strong cryptographic algorithms (128-bit) and is not exportable outside North
America without an export license, and a second version that contains exportable
(40-bit) cryptographic code, which is exportable to most destinations without
restriction.

Because of these governmental export restrictions, no localized versions of
Windows NT are currently available in 128-bit versions. Non-North American
English versions of these files contain only exportable cryptographic code.

In Service Pack 3, the only files that are different between the 40-bit and
128-bit versions of the service packs are:

 - Ndiswan.sys
 - Ntlmssps.dll
 - Schannel.dll
 - Security.dll
 - Update.inf

Additionally, the 128-bit version also includes Rsaenh.dll.

Perform the following steps to verify the version of the files installed:

1. Start Windows NT Explorer.

2. Right-click the file, click Properties, and then click the Version tab.

3. Note the description.

   40-bit:

      File Name     Description
      -------------------------
      Ndiswan.sys   MS WAN Wrapper Network Driver (Export Version)
      Ntlmssps.dll  NtLm Security Support Provider Service DLL (Export
                    Version)
      Schannel.dll  PCT / SSL Security Provider (Export Version)
      Security.dll  NtLm Security Support Provider Client DLL (Export
                    Version)

   128-bit:

      File Name     Description
      -------------------------
      Ndiswan.sys   MS WAN Wrapper Network Driver (Domestic Use Only)
      Ntlmssps.dll  NtLm Security Support Provider Service DLL (Domestic
                    Use Only)
      Rsaenh.dll    Microsoft Enhanced Cryptographic Provider (US/Canada
                    Only, Not for Export)
      Schannel.dll  PCT / SSL Security Provider (US and Canada Use Only)
      Security.dll  NtLm Security Support Provider Client DLL (Domestic
                    Use Only)

Installing 40-bit Service Pack on a 128-bit Windows NT installation will possibly
result in reduced functionality.

Installing 128-bit Service Pack on a 40-bit Windows NT installation will replace
all the files concerning encryption and will make the installation 128bit.

NOTE: The uninstall procedure for Service Pack 4 will retain the 128-bit
schannel.dll but returns all other encryption files to 40-bit versions.


When installing hotfixes that replace any one of these files, you should be sure
to install the correct version of the hotfix to maintain the correct
cryptographic strength.

Additional query words: 4.00 sp sp1 sp2 sp3 sp4

======================================================================
Keywords          :  
Technology        : kbWinNTsearch kbWinNTWsearch kbWinNTW400 kbWinNTW400search kbWinNT400search kbWinNTSsearch kbWinNTSEntSearch kbWinNTS400search kbWinNTS400
Version           : winnt:4.0
Hardware          : ALPHA x86
Issue type        : kbinfo

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2001.