Re: How to - PKCS#7 in c#



I think enveloped CMS is intended for use without certificates. All of the
recipient and signer classes seem to expect certificates here.

You might be better off finding a different library that does support this
(assuming that CMS actually supports this use case; I'm not sure), or
perhaps rolling your own format that encrypts, then signs.

Why the reluctance to use certificates though?

Best of luck,

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"kplkumar" <kplkumar@xxxxxxxxx> wrote in message
news:1152636653.070488.248800@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Thanks Dominic.

At this time, we don't want to use certificates. I want to use
public/private key.
All I want is to encrypt the string message using RSA+PKCS#7 and then
add a another layer of digital signing to the encrupted messahe using
the same and send it out.

I am not able to get this going using the
System.Security.Cryptography.Pkcs namespace. I poked around quite a bit
in vain.

Can someone help me here? Some code would be really helpful. Thanks in
advance.



.



Relevant Pages

  • Re: Sending signed and encrypted email.
    ... The user may have 1 or more certificates, ... via an AD lookup, you would want their encryption certificate, not their ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... I am new to framework 2.0 so unsure about the capabilities of the ...
    (microsoft.public.dotnet.security)
  • Re: httpcertcfg for server 2008
    ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... You basically just need a way to identify the private key file ... protected by client digital certificates. ... I am trying to do the same in Server 2008 now. ...
    (microsoft.public.windows.server.security)
  • Re: List client certificates
    ... you need access to a user's client certificates and the private ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... user certificate. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Signing LDAP Without Certificate Services
    ... You don't need to install your own CA though. ... You can just buy SSL certificates from a commercial instead. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)