From: Credzba on
I need certified encryption in my kernel mode driver on Windows XP.
The only Microsoft solution is FIPS.SYS.
The Microsoft web page says "A kernel mode user of the FIPS.SYS driver must
be able to reference the FipsXXX functions before using them. The user needs
to acquire the table of pointers to the FipsXXX functions from the FIPS.SYS
driver. The user accomplishes the table acquisition by building a Fips
function table request irp (I/O request packet) and then sending the irp to
the FIPS.SYS diver via the IoCallDriver function. Further information on irp
and IoCallDriver can be found on Microsoft Windows 2000 Driver Development
Kit."

What is irp that needs to be built, and what is the format of the function
table returned?

I realize this driver does not exist on later platforms, but it is the best
I have for XP machines.

"cristalink" wrote:

> >> Can the Windows Cryptographic API be used in kernel-mode
>
> No. But you can have a user mode program that will provide crypto services
> for your driver.
>
> >> is there a Cryptographic API in Windows available to kernel-mode drivers
>
> There is fips.sys that provides certain encryption algorithms. It is not
> documented, though can be used. Apart from this, you need 3rd party code.
>
> --
> http://www.cristalink.com
>
>
> "Ronny S" <RonnyS(a)discussions.microsoft.com> wrote in message
> news:71B9BF46-9543-4F0C-BAA5-B8DFF4926CB5(a)microsoft.com...
> > Can the Windows Cryptographic API be used in kernel-mode or is it only for
> > user-mode applications? If it is user-mode only, is there a Cryptographic
> > API in Windows available to kernel-mode drivers?
> >
> > If the above is not available, are there any third-party encryption
> > libraries that can be used in a kernel-mode driver?
> >
> > Thanks for your replies.
>
>
>