BCryptOpenAlgorithmProvider

Question

Hello,
I try to open TPM as algoritm provider for generate random numbers:

  BCRYPT_ALG_HANDLE hAlgorithm;
    NTSTATUS ntStat = BCryptOpenAlgorithmProvider ( &hAlgorithm, BCRYPT_RNG_ALGORITHM, MS_PLATFORM_CRYPTO_PROVIDER, NULL);

I get ntStat = STATUS_NOT_FOUND;

If I use MS_PRIMITIVE_PROVIDER instead of MS_PLATFORM_CRYPTO_PROVIDER everything is OK.

What I do wrong? TPM is enabled on the my computer, and I run the program as Administrator on Windows 10 Professional.

Answer 1

MS_PLATFORM_CRYPTO_PROVIDER fails to open for me too, and the 2 other coworkers I asked to try it.

Answer 2

Hi Cheong00,
thanks for your comment.

I'm using Win10.
This is my regedit window, Microsoft Crypto Provider is present. I also checked TPM functionalities with tpm.msc and everything is fine.

However I get an error whenever I try to run certtmpl.msc, translated it is like: "Impossiblle to find the file "certtmpl.msc". Verify the name and retry". Maybe it is related?

Answer 3

Try search the algorithm you want to use under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Providers . If "Microsoft Platform Crypto Provider" is not listed, I think the choice is not provided by the current system.

You'll need Win8 / Win2012 or above to choose "Microsoft Platform Crypto Provider".

You may also try to follow this exercise and see if you can get "Microsoft Platform Crypto Provider" working.

Answer 4

Hi All,
I have the same exact problem.
Here is my code:

ntstat = BCryptOpenAlgorithmProvider(&pHandle,BCRYPT_RNG_ALGORITHM,MS_PRIMITIVE_PROVIDER,//MS_PLATFORM_CRYPTO_PROVIDER,
                                                            NULL);
                    if (0 == ntstat)
                    {
                        for (long i = 0; i < filesize; i++) {
                            BCryptGenRandom(pHandle, buf, sizeof(buf), NULL);
                            //outfile.write((char *)&buf[0], _countof(buf));
                        }
                        BCryptCloseAlgorithmProvider(pHandle, NULL);
                    }
                    else
                    {
                        sprintf((char *)text, "error = 0x%08x", (unsigned int)ntstat);
                    }

Best regards,