SecureZeroMemory with RtlGenRandom and Warnings about getrandom HOT 3 CLOSED

Is this done/called automatically in this crate

Nope, this crate specifically implements one function:

pub fn getrandom(dest: &mut [u8]) -> Result<(), Error>

and that's it. Things like SecureZeroMemory are orthogonal to this crate, and would be be handled by a "Secure Buffer Mangement" crate like secstr. That crate's SecVec<u8> implements BorrowMut<[u8]>, so it can be used with getrandom like any u8 array or Vec<u8>.

Both securely managing secrets in memory and generating good random bytes are tricky problems, but they are different problems. Keeping them in separate crates seems to be the best bet.

And CryptGenRandom is deprecated. I already read the issue thread about why you don't want to use BCryptGenRandom rn because it doesn't support Windows XP, but I honestly think the change should be made soon. BCryptGenRandom works on minimum of Windows Vista.

I think discussion around this are best handled in #65 (so that everyone involved will see it).

from getrandom.

Regarding deprecation of RtlGenRandom see this message. There is a proposal to use getrandom inside std, so as long as Windows XP (and preferably Vista) support is not officially dropped by Rust, we have to stay conservative.

I think we can close this issue in favor of #65?

from getrandom.

Yes, I'll close the issue and any further discussion can be done on #65

from getrandom.