kernel-mode encryption

Can the Windows Cryptographic API be used in kernel-mode or is it only for
user-mode applications? If it is user-mode only, is there a Cryptographic
API in Windows available to kernel-mode drivers?

If the above is not available, are there any third-party encryption
libraries that can be used in a kernel-mode driver?

Thanks for your replies.

>> Can the Windows Cryptographic API be used in kernel-mode

No. But you can have a user mode program that will provide crypto services
for your driver.

>> is there a Cryptographic API in Windows available to kernel-mode drivers

There is fips.sys that provides certain encryption algorithms. It is not
documented, though can be used. Apart from this, you need 3rd party code.

--
http://www.cristalink.com


"Ronny S" <> wrote in message
news:71B9BF46-9543-4F0C-BAA5-...
> Can the Windows Cryptographic API be used in kernel-mode or is it only for
> user-mode applications? If it is user-mode only, is there a Cryptographic
> API in Windows available to kernel-mode drivers?
>
> If the above is not available, are there any third-party encryption
> libraries that can be used in a kernel-mode driver?
>
> Thanks for your replies.

don't rely on fips.sys, there is no guarantee it will be in the next OS
release or SP.

d

--
Please do not send e-mail directly to this alias. this alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.


"cristalink" <> wrote in message
news:...
>>> Can the Windows Cryptographic API be used in kernel-mode
>
> No. But you can have a user mode program that will provide crypto services
> for your driver.
>
>>> is there a Cryptographic API in Windows available to kernel-mode drivers
>
> There is fips.sys that provides certain encryption algorithms. It is not
> documented, though can be used. Apart from this, you need 3rd party code.
>
> --
> http://www.cristalink.com
>
>
> "Ronny S" <> wrote in message
> news:71B9BF46-9543-4F0C-BAA5-...
>> Can the Windows Cryptographic API be used in kernel-mode or is it only
>> for
>> user-mode applications? If it is user-mode only, is there a
>> Cryptographic
>> API in Windows available to kernel-mode drivers?
>>
>> If the above is not available, are there any third-party encryption
>> libraries that can be used in a kernel-mode driver?
>>
>> Thanks for your replies.
>
>

I would pull the code from OpenSSL.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation

http://www.storagecraft.com

"Ronny S" <> wrote in message
news:71B9BF46-9543-4F0C-BAA5-...
> Can the Windows Cryptographic API be used in kernel-mode or is it only for
> user-mode applications? If it is user-mode only, is there a Cryptographic
> API in Windows available to kernel-mode drivers?
>
> If the above is not available, are there any third-party encryption
> libraries that can be used in a kernel-mode driver?
>
> Thanks for your replies.

I need certified encryption in my kernel mode driver on Windows XP.
The only Microsoft solution is FIPS.SYS.
The Microsoft web page says "A kernel mode user of the FIPS.SYS driver must
be able to reference the FipsXXX functions before using them. The user needs
to acquire the table of pointers to the FipsXXX functions from the FIPS.SYS
driver. The user accomplishes the table acquisition by building a Fips
function table request irp (I/O request packet) and then sending the irp to
the FIPS.SYS diver via the IoCallDriver function. Further information on irp
and IoCallDriver can be found on Microsoft Windows 2000 Driver Development
Kit."

What is irp that needs to be built, and what is the format of the function
table returned?

I realize this driver does not exist on later platforms, but it is the best
I have for XP machines.

"cristalink" wrote:

> >> Can the Windows Cryptographic API be used in kernel-mode
>
> No. But you can have a user mode program that will provide crypto services
> for your driver.
>
> >> is there a Cryptographic API in Windows available to kernel-mode drivers
>
> There is fips.sys that provides certain encryption algorithms. It is not
> documented, though can be used. Apart from this, you need 3rd party code.
>
> --
> http://www.cristalink.com
>
>
> "Ronny S" <> wrote in message
> news:71B9BF46-9543-4F0C-BAA5-...
> > Can the Windows Cryptographic API be used in kernel-mode or is it only for
> > user-mode applications? If it is user-mode only, is there a Cryptographic
> > API in Windows available to kernel-mode drivers?
> >
> > If the above is not available, are there any third-party encryption
> > libraries that can be used in a kernel-mode driver?
> >
> > Thanks for your replies.
>
>
>