Microsoft Cryptography Next Generation (CNG)

Microsoft Cryptography Next Generation (CNG) is a Windows framework that provides core services for encryption, digital signatures, and key management. It offers a unified interface for applications to access cryptographic functions without depending on specific algorithms or hardware. CNG supports current cryptographic standards, accommodates custom and third-party providers, and is designed to evolve with new algorithms and security technologies.

CNG Engine

We provide an OpenSSL CNG engine that enables OpenSSL-based applications to use keys and certificates from the Windows certificate infrastructure.

CNG Provider

The OpenSSL CNG provider is now available. It is a native OpenSSL 3.x provider that integrates Windows CNG with OpenSSL’s provider architecture, supports property queries, coexists with the default and FIPS providers, and gives access to keys in Windows stores as well as smart card or TPM-backed keys.