Microsoft .NET PRNG

"Yvan Boily" <[email protected]> Wed, 28 Jul 2004 14:40:05 -0500
Newsgroups gmane.comp.security.programming
Message-ID <[email protected]>
I have read both FoundStone's and @Stakes reviews of the PRNG included with
the Microsoft .NET 1.1 framework (also the Win32 CryptoAPI) , however there
is little information available (that I have been able to locate) that
discusses the actual method used, or an analysis of how reliable it is from
a cryptographic perspective.

I don't profess to be expert enough on random number generation and
cryptography to criticize the implementation, however I would like to know
more about it as most code samples I have seen and now an application I am
auditing is relying extensively on the CryptoAPI to provide facilities for
random key generation.

Does anyone have any technical resources which discuss concerns or
commendations of the implementation?

Regards,

Yvan Boily