RE: Microsoft .NET PRNG

[email protected] (Peter Gutmann) Sat, 31 Jul 2004 18:16:23 +1200
Newsgroups gmane.comp.security.programming
Message-ID <E1BqnAN-0006o5-VW@medusa01>
"Pablo Milano" <[email protected]> writes:

>I'm looking for the same information. I want to know which method does MS
>Crypto API use in order to obtain "strong" random seeds. The most in-deep
>information about this I could find was
>http://msdn.microsoft.com/library/default.asp?url=3D/library/en-us/seccrypto/security/cpgenrandom.asp.
>Anyway, I'm still not sure if what is explained there is what the function
>SHOULD do, or what the function ACTUALLY DOES.

The best description that I know of is in the second edition (not the first)
of "Writing Secure Code" by Michael Howard and David LeBlanc.

Peter.