THotPDF.AddPubKeyAgreementRecipient Method

Builds a CMS KeyAgreeRecipientInfo envelope using caller or HSM-derived agreement material

Declaration

procedure AddPubKeyAgreementRecipient(const CertificateDER: array of byte; Permissions: THPDFProtectOptions; Scheme: THPDFPubKeyAgreementScheme; const OriginatorPublicKey, SharedSecret: array of byte);

Usage notes

• Supported schemes are P-256, P-384, P-521, X25519, and X448
• The certificate algorithm and key size must match Scheme
• The matching X9.63 KDF derives an AES-256 key-encryption key
• All-zero shared secrets are rejected and temporary secret copies are cleared