Use unpredictability better on Windows
Use unpredictability better on Windows
On Win32 / Win64 and using either CryptGenRandom or RtlGenRandom read and drop first 128Kbytes of *GenRandom before calling again for entropy to be used for key material or deterministic generators.
This is due to possibly insecure/exposed PRNG state on some win32 hosts this read past the first 128Kbytes of generator output before is explained in http://eprint.iacr.org/2007/419
See: gitweb.torproject.org/tor.git/tree/src/common/crypto.c#n2457 crypto_strongest_rand();
Also, https://privatepaste.com/45ff1fac9f here another idea used mingw specific of crt, simple and no any extra linking.
Trac:
Username: anon