RE: Microsoft .NET PRNG

Hi,

	Perhaps this is a good reason for Microsoft to follow in Java's
footsteps and release the source-code for the .Net library :)

-- Michael


-----Original Message-----
From: Yvan Boily [mailto:[email protected]] 
Sent: Thursday, 29 July 2004 5:40 AM
To: [email protected]
Subject: Microsoft .NET PRNG


I have read both FoundStone's and @Stakes reviews of the PRNG included
with
the Microsoft .NET 1.1 framework (also the Win32 CryptoAPI) , however
there
is little information available (that I have been able to locate) that
discusses the actual method used, or an analysis of how reliable it is
from
a cryptographic perspective.

I don't profess to be expert enough on random number generation and
cryptography to criticize the implementation, however I would like to
know
more about it as most code samples I have seen and now an application I
am
auditing is relying extensively on the CryptoAPI to provide facilities
for
random key generation.

Does anyone have any technical resources which discuss concerns or
commendations of the implementation?

Regards,

Yvan Boily




This email message and accompanying data may contain information that is confidential and/or subject to legal privilege. If you are not the intended recipient, you are notified that any use, dissemination, distribution or copying of this message or data is prohibited. If you have received this email message in error, please notify us immediately and erase all copies of this message and attachments.

This email is for your convenience only, you should not rely on any information contained herein for contractual or legal purposes. You should only rely on information and/or instructions in writing and on company letterhead signed by authorised persons.