Where are the BCrypt NTSTATUS code return values defined?

Question

The Windows CNG Cryptographic Primitive Functions have return values of type NTSTATUS. Several possible (symbolic) return values are mentioned, for example STATUS_AUTH_TAG_MISMATCH for the BCryptDecrypt function.

These symbols are not defined in bcrypt.h, nor in any other header file mentioned in the documentation. I can not use them in my code because they can not be resolved. Where are they located?

Answer 1

They are defined in:

ntstatus.h

Answer 2

windows.h is redefining macros without checking. This works:

#include <ntstatus.h>
#define WIN32_NO_STATUS 1
#include <windows.h>