SetSignProcessRSAPSSPadding

Security and signatures

Description

Selects RSASSA-PSS padding for the RSA detached signature built by a signing process

Syntax

Delphi

Function SetSignProcessRSAPSSPadding(SignProcessID: Integer; Enable: Boolean): Integer;

Parameters

SignProcessIDValue returned by a NewSignProcessFrom* function
EnableTrue to sign with RSASSA-PSS, false to keep PKCS#1 v1.5 padding (the default)

Return value

1 when the setting was stored, 0 for an invalid process id

Remarks

The setting applies to the adbe.pkcs7.detached and ETSI.CAdES.detached subfilters and requires a CNG-backed RSA private key; signatures made with legacy CryptoAPI keys stay PKCS#1 v1.5 padded

The CMS carries full RFC 4055 parameters: the digest from SetSignProcessDigestAlgorithm, MGF1 driven by the same digest and a salt length equal to the digest length

See also

SetSignProcessDigestAlgorithm, SetSignProcessSubFilter