Call to Action

• Review your use of cryptographic functionality to determine if you need Suite B algorithms or not. If you do, then CNG is the way to go.

• Determine how much of your code uses hard-coded algorithm names, start to migrate the code to read from a configuration store, and then write the cryptographic settings information to the document metadata.

• Evaluate which weak algorithms should be removed from your code and replaced with strong algorithms, or better yet stronger algorithms, making your code cryptoagile at the same time.

• Some cryptographic functionality is now deprecated in Windows Vista, and you should start to migrate to user the newer, more robust functionality instead.