Re: CNG key storage support in kernel mode

Peter_Scott · February 2, 2017, 10:48am

The NCrypt API set is not available in kernel mode. What APIs do you
want to use that are not available in the BCrypt API set?

Pete

–
Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295

------ Original Message ------
From: xxxxx@gmail.com
To: “Windows File Systems Devs Interest List”
Sent: 2/2/2017 6:43:00 AM
Subject: [ntfsd] CNG key storage support in kernel mode

>Hi,
>
>We are writing a file system filter driver for encryption and
>decryption using CNG library.
>We wish to use key storage properties of CNG library.
>Is it possible to use the key storage functions (Ncrypt…) in kernel
>mode?
>Currently we are using primitive functions (Bcrypt…) in kernel
>mode successfully.
>But when we try to include ncrypt.h, we are getting an error saying
>cannot include the file.
>Please let us know whether we can use key storage function in kernel
>mode.
>If possible let us know how to use it.
>
>
>Thanks in advance,
>S Ramakrishnan
>
>—
>NTFSD is sponsored by OSR
>
>
>MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>software drivers!
>Details at http:
>
>To unsubscribe, visit the List Server section of OSR Online at
>http:</http:></http:>

ramakrishnan_s · February 2, 2017, 11:09am

We want to create persistent keys using key storage functions (like
NCryptCreatePersistedKey).
Similar functions are not available in the BCrypt API set.

On Thu, Feb 2, 2017 at 9:17 PM, PScott wrote:

>
> The NCrypt API set is not available in kernel mode. What APIs do you want
> to use that are not available in the BCrypt API set?
>
> Pete
>
> –
> Kernel Drivers
> Windows File System and Device Driver Consulting
> www.KernelDrivers.com
> 866.263.9295
>
>
>
>
> ------ Original Message ------
> From: xxxxx@gmail.com
> To: “Windows File Systems Devs Interest List”
> Sent: 2/2/2017 6:43:00 AM
> Subject: [ntfsd] CNG key storage support in kernel mode
>
> Hi,
>>
>> We are writing a file system filter driver for encryption and decryption
>> using CNG library.
>> We wish to use key storage properties of CNG library.
>> Is it possible to use the key storage functions (Ncrypt…) in kernel
>> mode?
>> Currently we are using primitive functions (Bcrypt…) in kernel mode
>> successfully.
>> But when we try to include ncrypt.h, we are getting an error saying
>> cannot include the file.
>> Please let us know whether we can use key storage function in kernel mode.
>> If possible let us know how to use it.
>>
>>
>> Thanks in advance,
>> S Ramakrishnan
>>
>> —
>> NTFSD is sponsored by OSR
>>
>>
>> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>> software drivers!
>> Details at http:
>>
>> To unsubscribe, visit the List Server section of OSR Online at <
>> http://www.osronline.com/page.cfm?name=ListServer>
>>
>
>
> —
> NTFSD is sponsored by OSR
>
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> software drivers!
> Details at http:
>
> To unsubscribe, visit the List Server section of OSR Online at <
> http://www.osronline.com/page.cfm?name=ListServer>
></http:></http:>

ramakrishnan_s · February 3, 2017, 10:24am

Hi ,

Thanks for the reply.
Is there any better way to create persistent key from kernel or create a
key and store it persistent from kernel?

Thanks,
S Ramakrishnan

On Thu, Feb 2, 2017 at 9:38 PM, Rama Krishnan
wrote:

> We want to create persistent keys using key storage functions (like
> NCryptCreatePersistedKey).
> Similar functions are not available in the BCrypt API set.
>
> On Thu, Feb 2, 2017 at 9:17 PM, PScott wrote:
>
>>
>> The NCrypt API set is not available in kernel mode. What APIs do you want
>> to use that are not available in the BCrypt API set?
>>
>> Pete
>>
>> –
>> Kernel Drivers
>> Windows File System and Device Driver Consulting
>> www.KernelDrivers.com
>> 866.263.9295
>>
>>
>>
>>
>> ------ Original Message ------
>> From: xxxxx@gmail.com
>> To: “Windows File Systems Devs Interest List”
>> Sent: 2/2/2017 6:43:00 AM
>> Subject: [ntfsd] CNG key storage support in kernel mode
>>
>> Hi,
>>>
>>> We are writing a file system filter driver for encryption and decryption
>>> using CNG library.
>>> We wish to use key storage properties of CNG library.
>>> Is it possible to use the key storage functions (Ncrypt…) in kernel
>>> mode?
>>> Currently we are using primitive functions (Bcrypt…) in kernel mode
>>> successfully.
>>> But when we try to include ncrypt.h, we are getting an error saying
>>> cannot include the file.
>>> Please let us know whether we can use key storage function in kernel
>>> mode.
>>> If possible let us know how to use it.
>>>
>>>
>>> Thanks in advance,
>>> S Ramakrishnan
>>>
>>> —
>>> NTFSD is sponsored by OSR
>>>
>>>
>>> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>>> software drivers!
>>> Details at http:
>>>
>>> To unsubscribe, visit the List Server section of OSR Online at <
>>> http://www.osronline.com/page.cfm?name=ListServer>
>>>
>>
>>
>> —
>> NTFSD is sponsored by OSR
>>
>>
>> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>> software drivers!
>> Details at http:
>>
>> To unsubscribe, visit the List Server section of OSR Online at <
>> http://www.osronline.com/page.cfm?name=ListServer>
>>
>
></http:></http:>