CmsSig |
Advanced options for CMS signed-data objects
Namespace: CryptoSysPKI
Assembly: diCrSysPKINet (in diCrSysPKINet.dll) Version: 23.0.0.25611 (23.0.0.0)
SyntaxMembers| Member name | Description |
|---|---|
| Default | Default option |
| ExcludeCerts | Exclude X.509 certs from output. |
| ExcludeData | Exclude data from output. |
| CertsOnly | Create a "certs-only" PKCS#7 certficate chain. |
| IncludeAttributes | To add signed attributes (default = no signed attributes) including content-type and message-digest plus any more added below. |
| AddSignTime | Add signing time to the signed attributes (requires IncludeAttributes). |
| AddSmimeCapabilities | Add S/MIME capabilities to the signed attributes (requires IncludeAttributes). |
| AddSigningCertificate | Add an ESS Signing Certificate attribute to the signed attributes (requires IncludeAttributes). |
| AddAlgProtection | Add an Algorithm Protection Attribute [RFC6211] to the signed attributes (requires IncludeAttributes). |
| FormatBase64 | Create output/expect input in base64 format (default = binary). |
| AddSigner | Add a new signer to an existing SignedData object. |
| PseudoSig | Create/sign a "pseudo" SignedData object with dummy placeholder signature. |
| Pss_SaltLenZero | Use a zero-length salt in an RSA-PSS signature (default = hLen the length of the digest output). |
| Mgf1Sha1 | Force the MGF1 hash function to be SHA-1 (RSASSA-PSS only, default = same as encoding hash function). |
| UseSki | Use subjectKeyIdentifier (SKI) instead of issuerAndSerialNumber for SignerIdentifier. |
| NoOuter | Create a "naked" SignedData object with no outerContentInfo as permitted by PKCS#7 v1.6 (specialist option). |
| AltAlgId | Use alternative (non-standard) signature algorithm identifiers, e.g. 'sha1withRSAEncryption' instead of 'rsaEncryption'. |
| BigFile | Use to speed up the processing of large files. |
See Also