Internet Explorer SSL Handshake

[Daniel McCann]

Does anyone know how Internet Explorer generates its symmetric keys for SSL?
Which function calls are made? I was under the impression it used
CryptDeriveKey during the SSL handshake to get the keys, but I only see one
call to CryptDeriveKey in my IE trace, and it happens when IE first loads,
not when an SSL connection is negotiated. This is a bit of a head-scratcher
for me and any help would be greatly appreciated.

[Scherbina Vladimir]

You don't know for sure what's going on inside IE untill you
disassemble/analyze and debug it. The generating key can be done in any way,
you can't be sure that one call of CryptDeriveKey makes all the work.