Alternative Cryptographic Secure Pseudo Random Number Generator for C# [closed]

Question

Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.

---

We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.

Closed 9 months ago.

Improve this question

After all this NSA stuff I was just wondering if anybody knows alternatives to the System.Security.Cryptography.RNGCryptoServiceProvider() from .NET - maybe an Open Source solution?

I tried to search for it, but wasn't really successful, so I hope anybody from the community has an idea?

Thanks

Answer 1

There are two random number generators in Bouncy Castle - C# version that may be of use: DigestRandomGenerator and VmpcRandomGenerator, both in the crypto.prng name space. The trick is to seed those random entropy from a source you can trust.

Note that I am unfamiliar with the VMPC algorithm. The DigestRandomGenerator largely depends on the security of the underlying hash function (SHA-512 is pretty secure and fast on 64 bit hardware). It is a rather simple implementation, but it should be secure none-the-less.

Answer 2

Using new .NET 6 APIs Generating random numbers from a CSPNG (Cryptographically Secure Pseudorandom Number Generator) is easier than ever:

// Give me 200 random bytes
var bytes = RandomNumberGenerator.GetBytes(200);