c - BCryptGenRandom 函数的理论周期是多少？

Question

我正在尝试使用 bcrypt.h 头文件中定义的函数 BCryptGenRandom 。但是，我找不到有关此函数的安全属性的信息。

BCryptGenRandom函数的理论周期是多少？

MSDN 似乎没有提供此信息。

Answer 1

微软:

The default random number provider implements an algorithm forgenerating random numbers that complies with the NIST SP800-90standard, specifically the CTR_DRBG portion of that standard.

美国国家标准技术研究所:

The seed used to instantiate the DRBG must contain sufficient entropyto provide an assurance of randomness. If the seed is kept secret, andthe algorithm is well designed, the bits output by the DRBG will beunpredictable, up to the instantiated security strength of the DRBG.

CTR_DRBG uses an approved block cipher algorithm in the counter mode

我们预计 CTR_DRBG 输出的最大位数等于 2^blocksize。有趣的是，Campagna表明我们无法区分 CTR_DRBG 的输出和真正的随机数生成器

The NIST codebook-based deterministic random bit generators areanalyzed in the context of being indistinguishable from random. Upperand lower bounds based on the probability of distinguishing the outputare proven. These bounds imply that the security of the designs arebounded by the codebook width, or more precisely on the property thatthe codebooks act like a random permutation, as opposed to theirunderlying security parameter or key length. This paper concludes thatthese designs fail to support security parameters larger than thecodebook width.