RE: How good a random source is Crypto API?

2005-04-04 Thread Steven Reddie
build of OpenSSL isn't straight-forward. Regards, Steven -Original Message- From: Richard Levitte - VMS Whacker [mailto:[EMAIL PROTECTED] Sent: Monday, 4 April 2005 5:17 PM To: openssl-dev@openssl.org; [EMAIL PROTECTED] Subject: Re: How good a random source is Crypto API? In message

Re: How good a random source is Crypto API?

2005-04-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 4 Apr 2005 16:53:21 +1000, "Steven Reddie" <[EMAIL PROTECTED]> said: smr> Moving such functionality out-of-process would improve stability, smr> and this is obviously where prngd/egd comes in, but if these are smr> seen as useful for more secure applications

RE: How good a random source is Crypto API?

2005-04-03 Thread Steven Reddie
seen as useful for more secure applications then it seems that a default OpenSSL install could settle for CryptoAPI's PRNG. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferdinand Prantl Sent: Monday, 4 April 2005 3:59 PM To: openssl-dev@openssl.org Su

RE: How good a random source is Crypto API?

2005-04-03 Thread Ferdinand Prantl
extremely slow under some circumstances... Ferda From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven Reddie Sent: Monday, April 04, 2005 7:45 AM To: openssl-dev@openssl.org Subject: How good a random source is Crypto

How good a random source is Crypto API?

2005-04-03 Thread Steven Reddie
The non-thread-safe nature of RAND_poll for Win32 is something I need to address as it's impossible given the use of my library to expect RAND_poll to be called before other threads exist.  This leads me to the question of how good a random source is the CryptGenRandom function on Windows.