All geek questions in one place

Is cryptoapi good?

I am writing a cryptogram that does things like hashing (sha1), encryption, digital characters for win32 in C ++ is built into cryptoapi secure, or should I use some other library like crypto ++ I need maximum security and I work on all xp and vista systems (and, possibly, 2000), but at the same time I need to minimize the size of the exe and therefore I do not want external files to be added

+3
source share
7 answers

Define "safe." The built-in windows crypto api does what it advertises and has no flaws that cannot be fixed, at least I know. The Crypto Next Generation API may be worth a look.

Usually in a protected program, the problem is what people do with the API - insufficient key length, leaving the keys in plain text, etc. - it really creates problems, not the software of the provider.

+6
source

"Security is a process, not a product." - schneier

Cryptographic algorithms, such as hashing, encryption and signing, are only part of the process:

  • How do you store keys? Can they accidentally leak to disk through a page file?
  • ? . Debian Netscape .
  • , ?
  • ?
  • ?
  • ?

CAPI CNG Vista . , CAPI, , .

, , , .

, ...

+2

" " , API , . API.

, API , , API.

+1

"" , , . - API, , , API .

.

0

CryptoAPI , .

, Windows : , , , , CryptoAPI . , - . , CryptoAPI, , , , . , , - ""; , , , .

, " " ( "" ), . , ; - .

, , , , . , .

0

140-2. .

0

Crypto API , Vista, CNG (Crypto APi Next Generation). , Crypto API Windows 7.

0
source

Source: https://habr.com/ru/post/1709000/

More articles:


All Articles