TLS Problem on Win 8.1

Question

Using Schannel, the following call works just fine on Windows Vista and Win 7, but not on Win 8.1.
CryptCreateHash(hCryptProv, CALG_SCHANNEL_MASTER_HASH, hMasterKey, 0, hMasterHash)
It returns Error 0x80090020 NTE_FAIL when using 128 bit RC4 & 160 bit SHA-1. When I enumerate the supported protocols, both are listed.
I have run out of ideas, and would appreciate any help.
J.A. Coutts

Answer 1

I am no closer to resolving this issue than I was 4 weeks ago. Acquiring the context PROV_RSA_SCHANNEL provides the following info:
Provider Type   Provider TypeName
1               RSA Full (Signature and Key Exchange)
3               DSS Signature
12              RSA SChannel
13              DSS Signature with Diffie-Hellman Key Exchange
18              Diffie-Hellman SChannel
24              RSA Full and AES
Provider Type   Provider Name
1               Microsoft Base Cryptographic Provider v1.0
13              Microsoft Base DSS and Diffie-Hellman Cryptographic Provider
3               Microsoft Base DSS Cryptographic Provider
1               Microsoft Base Smart Card Crypto Provider
18              Microsoft DH SChannel Cryptographic Provider
1               Microsoft Enhanced Cryptographic Provider v1.0
13              Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider
24              Microsoft Enhanced RSA and AES Cryptographic Provider
12              Microsoft RSA SChannel Cryptographic Provider
1               Microsoft Strong Cryptographic Provider
Default Provider Name : Microsoft Strong Cryptographic Provider
ALGID   dwBits  algType         namelen Name
26126      128  Data_Encrypt    8       AES 128
26128      256  Data_Encrypt    8       AES 256
26114      128  Data_Encrypt    4       RC2
26625      128  Data_Encrypt    4       RC4
26113       56  Data_Encrypt    4       DES
26121      112  Data_Encrypt    13      3DES TWO KEY
26115      168  Data_Encrypt    5       3DES
32772      160  Hash            6       SHA-1
32771      128  Hash            4       MD5
32776      288  Hash            12      SSL3 SHAMD5
32773        0  Hash            4       MAC
41984     1024  Exchange        9       RSA_KEYX
32777        0  Hash            5       HMAC
19461       40  Msg_Encrypt     12      SSL2 MASTER
19457      384  Msg_Encrypt     12      SSL3 MASTER
19462      384  Msg_Encrypt     12      TLS1 MASTER
19458        0  Msg_Encrypt     16      SCH MASTER HASH
19459        0  Msg_Encrypt     12      SCH MAC KEY
19463        0  Msg_Encrypt     12      SCH ENC KEY
Using SCHANNEL_ENC_KEY = CALG_RC4/128 and SCHANNEL_MAC_KEY = CALG_SHA1/160 causes CryptCreateHash to fail with Error 80090020. Using SCHANNEL_ENC_KEY = CALG_AES_256/256 or CALG_3DES/168 produces the same error. Using SCHANNEL_MAC_KEY = CALG_SHA_256 fails at
the preceeding CryptSetKeyParam with an Error 80090005.
At this point I don't know if I am doing something wrong, or if SCHANNEL on Win 8.1 simply doesn't support this call. Given the fact that it works on Vista and Win 7, I would tend to believe the latter, but I can't find any alternative for creating the MASTER_HASH.
J.A. Coutts