Security analysis of Microsoft RMS

• Main Authors: Joanna Dmitruk, Kamil Kaczyński
• Format: Article
• Language: English
• Published: Wojskowa Akademia Techniczna, Redakcja Wydawnictw WAT, ul. gen. S. Kaliskiego 2, 00-908 Warszawa 2017-12-01
• Series: Biuletyn Wojskowej Akademii Technicznej
• Subjects: DRM; cryptography; cryptanalysis; RMS; Microsoft
• Online Access: http://biuletynwat.pl/gicid/01.3001.0010.8220

Microsoft Rights Management Services (RMS) is a system designed to ensure the protection and proper use of electronic documents. RMS allows to apply different access policies for documents, thus allowing to control their use in time. The system allows not only defining access policies at document creation, but also after its distribution. Microsoft RMS uses a number of advanced cryptographic mechanisms and primitives to ensure overall service security. In this paper, we have analyzed the security of RMS, indicating a number of possible gaps. The methods of solving those problems, especially those related to data integrity, have been proposed. Keywords: DRM, cryptography, cryptanalysis, RMS, Microsoft