System.Security.Cryptography.RNGCryptoServiceProvider FIPS 140-2 投诉吗?

Is System.Security.Cryptography.RNGCryptoServiceProvider FIPS 140-2 complaint?

我们正在使用这个 System.Security.Cryptography.RNGCryptoServiceProvider .net 库。 我们需要确保它是否符合 FIPS 140-2

这是来自 MS

的 link

https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation#_microsoft_fips_140

这取决于操作系统。这个 .NET 对象实际上只是 OS 提供的加密服务的包装器,算法可能随时更改。

参考CryptGenRandom文档:

In Windows Vista with Service Pack 1 (SP1) and later, an implementation of the AES counter-mode based PRNG specified in NIST Special Publication 800-90 is used. In Windows Vista, Windows Storage Server 2003, and Windows XP, the PRNG specified in Federal Information Processing Standard (FIPS) 186-2 is used.