What version of openssl are you using?  Current versions do not call 
RAND_screen or other long-term heap-walking on Windows.

You absolutely *must* properly initialize the random number generator.  If you 
fail to do that, attackers can guess the keys that you use.  You will be 
providing only the illusion of security.

Please pass this along to that other app.  What it, and you, are doing is 
horrible.

--
Senior Architect, Akamai Technologies
Member, OpenSSL Dev Team
IM: richs...@jabber.at Twitter: RichSalz
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to