Use windows crate to link with required system libraries

Author: Not-Nik

Cargo.lock

@@ -21,6 +21,9 @@ pkcs11-bindings = ">= 0.1.3"
 strum = { version = "0.27", default-features = false, features = ["derive"] }
 thiserror = "2.0.12"
 
+[target.'cfg(windows)'.dependencies]
+windows = { version = ">=0.60,<0.63", features = ["Win32_Security_Authentication_Identity"]}
+
 [build-dependencies]
 bindgen = { version = "0.72", default-features = false, features = ["runtime"] }
 mozbuild = { version = "0.1", default-features = false, optional = true }
@@ -33,7 +36,7 @@ toml = { version = "0.9", default-features = false, features = ["parse", "serde"
 test-fixture = {path = "test-fixture"}
 
 [package.metadata.cargo-machete]
-ignored = ["bindgen", "semver", "serde", "serde_derive", "toml"]
+ignored = ["bindgen", "semver", "serde", "serde_derive", "toml", "windows"]
 
 [lints.rust]
 absolute_paths_not_starting_with_crate = "warn"

Cargo.toml

@@ -544,10 +544,6 @@ fn process_config(config: &mut HashMap<String, Bindings>) {
 fn main() {
     println!("cargo:rustc-check-cfg=cfg(nss_nodb)");
 
-    if env::consts::OS == "windows" {
-        println!("cargo:rustc-link-lib=advapi32");
-    }
-
     let flags = if cfg!(feature = "gecko") {
         setup_for_gecko()
     } else if let Ok(nss_dir) = env::var("NSS_DIR") {

build.rs

@@ -47,6 +47,12 @@ use std::{
 use log::error;
 use once_cell::sync::OnceCell;
 
+#[cfg(windows)]
+#[expect(unused_imports, reason = "Force Advapi32 linkage")]
+mod _link_anchor {
+    use windows::Win32::Security::Authentication::Identity::RtlGenRandom as _;
+}
+
 #[cfg(not(feature = "disable-encryption"))]
 pub use self::aead::RealAead as Aead;
 #[cfg(feature = "disable-encryption")]