Microsoft .NET PRNG
"Yvan Boily" <[email protected]> Wed, 28 Jul 2004 14:40:05 -0500
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
I have read both FoundStone's and @Stakes reviews of the PRNG included with the Microsoft .NET 1.1 framework (also the Win32 CryptoAPI) , however there is little information available (that I have been able to locate) that discusses the actual method used, or an analysis of how reliable it is from a cryptographic perspective. I don't profess to be expert enough on random number generation and cryptography to criticize the implementation, however I would like to know more about it as most code samples I have seen and now an application I am auditing is relying extensively on the CryptoAPI to provide facilities for random key generation. Does anyone have any technical resources which discuss concerns or commendations of the implementation? Regards, Yvan Boily