...
On Windows platforms, the CryptGenRandom BcryptGenRandom() function can be used to generate cryptographically strong random numbers. The exact details of the implementation are unknown, including, for example, what source of entropy CryptGenRandom() uses. The Microsoft Developer Network CryptGenRandomBCryptGenRandom() reference [MSDN] states
If an application has access to a good random source, it can fill the
pbBufferbuffer with some random data before callingCryptGenRandom(). The CSP [cryptographic service provider] then uses this data to further randomize its internal seed. It is acceptable to omit the step of initializing thepbBufferbuffer before callingCryptGenRandom()The default random number provider implements an algorithm for generating random numbers that complies with the NIST SP800-90 standard, specifically the CTR_DRBG portion of that standard.
Code Block
bgColor #ccccff lang c #include <Windows.h> #include
...
...
...
...
...
...
...
...
...
...
...
...
...
(
...
...
(
...
&
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
/*
...
...
}
...
...
Risk Assessment
The use of the rand() function can result in predictable random numbers.
...