THPDFSignatureProviderRequest Record

Carries the algorithm, input, key material, and bookkeeping identifiers of one signature provider operation

Declaration

THPDFSignatureProviderRequest= record
  Algorithm: THPDFSignatureAlgorithm;
  AlgorithmOID: AnsiString;
  DigestAlgorithmOID: AnsiString;
  PSSSaltLength: Integer;
  InputKind: THPDFSignatureInputKind;
  Input: TBytes;
  PublicKey: TBytes;
  Signature: TBytes;
  CertificateDER: TBytes;
  KeyIdentifier: AnsiString;
  OperationIdentifier: AnsiString;
  Context: TBytes;
end;

Unit

HPDFSignatureProvider

Fields

Field	Purpose
`Algorithm`	Signature algorithm to execute, such as `hsaRSAPKCS1v15`, `hsaRSAPSS`, or `hsaECDSA`
`AlgorithmOID`	Object identifier of the signature algorithm
`DigestAlgorithmOID`	Object identifier of the digest algorithm
`PSSSaltLength`	Salt length for RSA-PSS; values outside 0..65535 are rejected by the provider
`InputKind`	Whether `Input` holds a message (`sikMessage`) or a ready digest (`sikDigest`)
`Input`	Message or digest bytes; empty or oversized input is rejected as malformed
`PublicKey`	Public key bytes imported when a signature is verified
`Signature`	Signature bytes checked by verify operations
`CertificateDER`	DER certificate used to estimate the resulting signature size
`KeyIdentifier`	Provider-specific identifier naming the signing key
`OperationIdentifier`	Identifier the provider checks against its cancellation source between retries
`Context`	Provider-defined context bytes carried with the request

Usage notes

Passed to Sign, Verify, and EstimateSignatureSize of THPDFSignatureProvider implementations
Providers validate InputKind and Input length first and return spsMalformed when they disagree with Algorithm
Custom transports receive the same record plus the retry attempt number and may consult OperationIdentifier for cancellation

THPDFSignatureProviderRequest Record

Declaration

Unit

Fields

Usage notes

Related APIs