If I want to generate strong high quality RSA keys, is there any reason not to use Microsoft's built-in cryptography system? Or should I use something open source like OpenSSL or Bouncy Castle?
I'm not necessarily afraid of backdoors, but I'm wondering whether I can trust the process of finding quality primes. I don't want to find out in a year that all the CSP generated RSA parameters had a flaw and the primes are following a simple pattern. The successful GCD attack on one in every 200 out of thousands of publicly available RSA keys made me wonder.
The generation is a once and done issue, so I'm happy to go the extra mile generating the keys if it's any more secure.