RE: Microsoft .NET PRNG

I'm looking for the same information. I want to know which method does MS
Crypto API use in order to obtain "strong" random seeds. The most in-deep
information about this I could find was
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/seccrypto/s
ecurity/cpgenrandom.asp. Anyway, I'm still not sure if what is explained
there is what the function SHOULD do, or what the function ACTUALLY DOES.
Any help would be appreciated.
Regards.

> -----Mensaje original-----
> De: Yvan Boily [mailto:[email protected]] 
> Enviado el: Miércoles, 28 de Julio de 2004 04:40 p.m.
> Para: [email protected]
> Asunto: Microsoft .NET PRNG
> 
> 
> I have read both FoundStone's and @Stakes reviews of the PRNG 
> included with
> the Microsoft .NET 1.1 framework (also the Win32 CryptoAPI) , 
> however there
> is little information available (that I have been able to locate) that
> discusses the actual method used, or an analysis of how 
> reliable it is from
> a cryptographic perspective.
> 
> I don't profess to be expert enough on random number generation and
> cryptography to criticize the implementation, however I would 
> like to know
> more about it as most code samples I have seen and now an 
> application I am
> auditing is relying extensively on the CryptoAPI to provide 
> facilities for
> random key generation.
> 
> Does anyone have any technical resources which discuss concerns or
> commendations of the implementation?
> 
> Regards,
> 
> Yvan Boily
> 
>