Certificates and Cryptography (Please HELP!)

From: M. Shawn Dillon (nollids@moc.ovc-erutrepa)
Date: 06/27/02


From: "M. Shawn Dillon" <nollids@moc.ovc-erutrepa>
Date: Thu, 27 Jun 2002 10:36:48 -0400


I am currently involved in a project which must be available for external
testing by COB this Friday (tomorrow) and am running into trouble with the
cryptography framework.

Our company is a MS shop, but we are working with another company that uses
a Java implementation. The goal is to be able to receive and verify signed
documents from this other company.

The other company will provide us with a public key (DSA, 1024 bits) in the
form of an X.509 certificate (sample attached), and a signed XML message.
What I need to be able to do is verify this signature.

I've read through the CryptoAPI documentation, the CAPICOM documentation,
and the System.Security.Cryptography documentation and have yet to find a
way to obtain a DSAParameters object (or associated public-key values) from
the given X.509 certificate.

Please, any help at all would be appreciated.

Thanks in advance,
M. Shawn Dillon, MCSD
Senior Developer
Aperture Credentialing, Inc.
sdillon@aperture-cvo.com.nospam

begin 666 signedMessage1.txt
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)/@H\+T)O9'D^
`
end

begin 666 message.txt
M/$UE<W-A9V4^#0H\4U-./C(S,3,Q,C,\+U-33CX-"CQ.86UE/E-M:71H+"!J
M;VAN/"].86UE/@T*/$%+04YA;64^;6%U<FEC93PO04M!3F%M93X-"CQ487AI
>9#XQ,C,T,S0V-3PO5&%X:60^#0H\+TUE<W-A9V4^
`
end

begin 666 test.cer
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A5V]O/0T*+2TM+2U%3D0@0T525$E&24-!5$4M+2TM+0T*
`
end



Relevant Pages

  • Re: Certificates and Cryptography (Please HELP!)
    ... signedMessage1.txt is the DSA 40-byte Base64-Encoded signature which I ... should be able to verify with the certificate's public key. ... The certificate store that I installed the certificate into ... >> I've read through the CryptoAPI documentation, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Writing a Crypto Provider (CSP)
    ... I intend to write a CSP for the embedded Windows editions ... > See the description in the Platform SDK: ... > About Cryptography ... >>Unfortunately I didn't find a documentation of the CSPI. ...
    (microsoft.public.platformsdk.security)
  • Re: Certificates and Cryptography (Please HELP!)
    ... little more information in the document containing the signature. ... > The other company will provide us with a public key ... > form of an X.509 certificate, ... > I've read through the CryptoAPI documentation, the CAPICOM documentation, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Pseudo random number generator
    ... See the documentation ... However, when you talk about "keys", you are usually talking ... cryptography, and the Mersenne Twister generator is NOT certified ... as cryptographically safe. ...
    (comp.soft-sys.matlab)
  • Re: Kerberos 5 certified under NIST 140-2.
    ... "Windows build of FIPS 1.1.1 is not thread-safe" which lead to some ... is the OpenSSL certificate. ... Kerberos 5 certified under NIST 140-2. ... Appendix A describes the documentation that is necessary. ...
    (comp.protocols.kerberos)