Re: Microsoft .NET PRNG

[email protected] (Peter Gutmann) Wed, 04 Aug 2004 03:36:00 +1200

Newsgroups	gmane.comp.security.programming
Message-ID	<E1Bs1Ka-000363-Vn@medusa01>

"M. Burnett" <[email protected]> writes:

>MD4 hashes create entropy from this seed data.

Are you sure it's still MD4?  I thought it was SHA-1 now.

(Actually it's a lot more complex than this, there's SHA-1, RC4, MD4, and a
 FIPS 186 PRNG in there, among other things, and MD4 only plays a very minor
 role, if any.  This echoes my earlier comment that this generator is a real
 moving target, by the time technical info about it gets into print, it's
 changed again).

Peter.