Collaborate Disseminate
how to sign the message with the private key of the signer using openssl command line tool to get the same result as the code below?
using System.Security.Cryptography.Pkcs;
using System.Security.Cryptography.X509Certificate… Continue reading How to convert this .NET cryptography code to openssl command?
We are considering creating timestamped PKCS#7 detached signatures for our backup files for audit purposes (timestamp would be created by an external trusted TSA). Which extended key usage (EKU) attributes, if any, should be … Continue reading Extended key usage attributes for PKCS#7 signatures of backup files
I have an app that receive data from third parties using various protocols: MQTT, HTTP, AMQP, …
Some clients cannot use TLS (iot devices without TLS support), so we need to find some compact and easy way to receive encrypte… Continue reading Common format to send encrypted data + IV?
I have a PE binary with a digital signature. I want to get the original PE hash (not the hash of the whole file).
I can’t figure out how to read it from the file. The Authenticode spec suggests the PKCS#7 signature block (e…. Continue reading How do you get the PE file hash of a signed file?
Why is the certificate that results from a CSR usually contained in a PKCS#7? The signature of the certificate is contained within the certificate itself so there’s no need for an external signature anyway and looking at some… Continue reading Why is PKCS#7 used as a response to PKCS#10?
What does serialNumber in a S/MIME-signature stand for in
signerInfos:
version: 1
d.issuerAndSerialNumber:
…
serialNumber: 620…
?
How is it generated and can you identify anything with this?
… Continue reading What does the (issuer-) serialNumber in a S/MIME signature mean?
RFC3851 says:
The multipart/signed Content type has two required parameters: the
protocol parameter and the micalg parameter.
and
The micalg parameter allows for one-pass processing when the
signature is b… Continue reading Why is it called micalg?
I would like to encapsulate SignedData in EnvelopedData.
I am using BouncyCastle.
After looking in an example, I wrote something like this:
CMSSignedData signedData = gen.generate(new CMSProcessableByteArray(out.toByteArra… Continue reading Nested PKCS7 in BouncyCastle
I want to encrypt a large blob of binary data (let’s say, 1GB), using asymmetric encryption (so that only public key is needed to encrypt the data, but private key is needed to decrypt it). As a nice addition, I would like to… Continue reading Is there an industry-standard data container for asymmetric encryption / signing with secure algorithms?
I need to validate if my the returned string (in the method below) is signed in pkcs7 format. How can I check this? I need to pass only content (which is to be signed) and cert by which I will sign.
public static string Sign… Continue reading How to verify that signed content is in pkcs7 format?