Problem - Kevin Tafuro

Here we show how to use this function by binding it to the API from Recipe 11.2:
#include
#include
static HCRYPTPROV hProvider;
void spc_rand_init(void) {
if (!CryptAcquireContext(&hProvider, 0, 0, PROV_RSA_FULL, CRYPT_VERIFYCONTEXT))
ExitProcess((UINT)-1); /* Feel free to properly signal an error instead. */
}
unsigned char *spc_rand(unsigned char *pbBuffer, size_t cbBuffer) {
if (!hProvider) spc_rand_init( );
if (!CryptGenRandom(hProvider, cbBuffer, pbBuffer))
ExitProcess((UINT)-1); /* Feel free to properly signal an error instead. */
return pbBuffer;
}
unsigned char *spc_keygen(unsigned char *pbBuffer, size_t cbBuffer) {
if (!hProvider) spc_rand_init( );
if (!CryptGenRandom(hProvider, cbBuffer, pbBuffer))
ExitProcess((UINT)-1);
return pbBuffer;
}
See Also
Recipes 5.25, 11.2, 11.8, 11.20, 11.21, 11.22, 11.23
11.5 Using an Application-Level Generator
Problem
You are in an environment where you do not have access to a built-in, cryptographically
strong pseudo-random number generator. You have obtained enough entropy
to seed a pseudo-random generator, but you lack a generator.
Solution
For general-purpose use, we recommend a pseudo-random number generator based
on the AES encryption algorithm run in counter (CTR) mode (see Recipe 5.9). This
generator has the best theoretical security assurance, assuming that the underlying
cryptographic primitive is secure. If you would prefer a generator based on a hash
function, you can run HMAC-SHA1 (see Recipe 6.10) in counter mode.
In addition, the keystream of a secure stream cipher can be used as a pseudo-random
number generator.
Using an Application-Level Generator | 581
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.