4 ms·
If you're ever in Redmond, stop by and we'll go inspire some confidence with the folks maintaining it.
by marshray 13y ago
If you're ever in Redmond, stop by and we'll go inspire some confidence with the folks maintaining it.
- tptacek 13y agoTwo immediate questions: forward secrecy and CryptGenRandom's state relative to other WinAPI processes. As in, I'm very clear how the Unix security model protects /dev/random, and less clear about Windows. Some of my C.G.R. thoughts are probably dated. But it's the system CSPRNG, and I think, just use the system CSPRNG.
- marshray 13y agoYou have my email right? If you'd like to send me some specific questions and concerns I can try to put them to people who know.
- pbsd 13y agoThe forward security issues have been fixed for a long time (since Vista I believe): they now use SP800-90A's CTR_DRBG. But the generator continues to be unprotected in user mode, seeded from kernel.