.NET and the CAdES standard

Hi all,

You may want to sign data and verify those signatures by following the CAdES standard in your .NET application.

The issue is that, by default, we have no specific MS API or MS .NET security library to create or verify CAdES signatures.

As you may know already, .NET security libraries are a wrapper around the Microsoft native CryptoAPI. Unfortunately, low level CryptoAPI doesn’t understand CAdEs signatures.

So you may try to use e.g. SignedCms.CheckSignature to verify a CAdES signature (which is the usual way to check a CMS digital signature by using the approach detailed at Understanding of SignedCms.CheckSignature(True)) and it may return “true”. But .NET won’t be verifying the CAdES piece so it won’t satisfy your requirements.

Read more: Decrypt my World

Posted via email from .NET Info