CAPICOM enveloped data interop question

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 03/25/04 

Date: Thu, 25 Mar 2004 15:51:54 -0600

Hi all,

I'm building an application that will create files to be exchanged with a vendor. The design specifies that the data in the files must be encrypted via RSA with a vendor-supplied certificate and signed with a trusted certificate provided by me. Files use standard PKCS#7 enveloped data to accomplish this. We'll use 3DES for the symmetric algorithm, so the details are in place.

Given that .NET doesn't have much if any support for enveloped data in System.Security.Cryptography, I thought I would be most productive using CAPICOM via interop to generate the enveloped data. However, I noticed this from MSDN documentation

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/security/encrypting_and_decrypting_data.asp?frame=true

which indicates that CAPICOM creates non-standard enrypteddata files that can only be read with CAPICOM. I need standard PKCS#7. My question is, does the restriction above apply to enveloped data that is encrypted AND signed, or just encrypted data? I'm still a novice with crypto and the distinctions to me are not clear.

Any help would be greatly appreciated.

Thanks!

Joe K.

Relevant Pages

  • Re: CAPICOM
    ... Now THAT is a job for MS JVM. ... for COM interop (support for all major Variants, ... a .NET smart client app and do CAPICOM interop that way. ...
    (microsoft.public.platformsdk.security)
  • error when I use AES with CAPICOM
    ... I am trying to write a small utility using CAPICOM. ... What I am trying to do is use a smart card and create enveloped data. ... EnvelopedData oEnvelop = new CAPICOM.EnvelopedData; ...
    (microsoft.public.dotnet.security)