Find Cryptographic Providers in Windows Registry

This article explains where to locate registered cryptographic hashing and security providers for hardware security keys within the Windows Registry Editor (Regedit). In Windows, cryptographic algorithms and hardware-backed providers are managed through both the modern Cryptography Next Generation (CNG) architecture and legacy Cryptographic Service Providers (CSPs). Below are the exact registry locations and steps needed to inspect these registered providers.

Modern CNG Hardware and Hashing Providers

Windows CNG handles modern hardware security modules (HSM), TPMs, and FIDO/hardware security keys.

To view the list of registered CNG cryptographic providers:

1. Press Win + R, type regedit, and press Enter.
2. Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Providers

Under this key, you will see subkeys for registered providers such as the Microsoft Platform Crypto Provider (used for TPM-backed operations) and third-party hardware security modules.

To view registered hashing algorithms specifically configured for CNG:

• Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Cryptography\Configuration\Local\Default\00000001\HashAlgorithms

This directory lists supported hash algorithms (such as SHA256, SHA384, SHA512) and the priority order of the providers registered to execute them.

Legacy Cryptographic Service Providers (CSP)

Hardware tokens, smart cards, and older security keys frequently register legacy CSPs.

To view registered 64-bit CSPs: * Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider

To view registered 32-bit CSPs on a 64-bit system: * Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Defaults\Provider

Within each provider’s subkey, the Image Path string value specifies the .dll responsible for interfacing with the hardware key, and the Type value identifies the CSP type (e.g., PROV_RSA_FULL or PROV_RSA_SCHANNEL).

Smart Card and Hardware Security Key Mini-Drivers

Physical security keys functioning as smart cards or CCID devices store their driver and provider mappings under the Calais database:

• Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Calais\SmartCards

Each subkey represents an enrolled hardware security key or smart card profile, defining the associated Crypto Provider (CSP) or Key Storage Provider (KSP) module.