Calculate File MD5 in kernel mode.

[Senthil]

Is there an DDK API to calculate the MD5 of a given file? If not, is
there a sample that I can use in kernel mode? Thanks,
Sen

[Burkhardt Braun]

Hello Senthil,

Post by Senthil
Is there an DDK API to calculate the MD5 of a given file? If not, is

No.

Post by Senthil
there a sample that I can use in kernel mode? Thanks,

You can open a file with ZwOpenFile and process it then.
The porting of the MD5 algorithm is straightforward.
There are no resources needed than static memory and CPU-load.

Good luck
Burkhardt Braun

Post by Senthil
Sen

[RossettoeCioccolato]

On Windows Vista and later you can use BCrypt to generate a MD5 digest in
the kernel. Include bcrypt.h and link to Ksecdd.lib. On earlier versions
of Windows you will have to reverse fips.sys. The FIPS API is partially
documented at
http://www.microsoft.com/technet/archive/security/topics/issues/fipsdrsp.mspx?pf=true.
But you will still have to reverse some details on your own. The FIPS API
is not particularly well designed.