Re:How to safely generate a random number
by marshray on Tuesday February 25, 2014 @09:37PM
(#7302454)
If you're ever in Redmond, stop by and we'll go inspire some confidence with the folks maintaining it.
[ Parent
| on HN ]
Re:How to safely generate a random number
by tptacek on Tuesday February 25, 2014 @09:40PM
(#7302468)
Two immediate questions: forward secrecy and CryptGenRandom's state relative to other WinAPI processes. As in, I'm very clear how the Unix security model protects /dev/random, and less clear about Windows. Some of my C.G.R. thoughts are probably dated. But it's the system CSPRNG, and I think, just use the system CSPRNG.
Re:How to safely generate a random number
by marshray on Tuesday February 25, 2014 @09:59PM
(#7302567)
You have my email right? If you'd like to send me some specific questions and concerns I can try to put them to people who know.
Re:How to safely generate a random number
by pbsd on Wednesday February 26, 2014 @11:20AM
(#7305809)
The forward security issues have been fixed for a long time (since Vista I believe): they now use SP800-90A's CTR_DRBG. But the generator continues to be unprotected in user mode, seeded from kernel.