THotPDF.AddPubKeyRecipientCertificate Method

Builds and registers a CMS recipient envelope for PDF 2.0 AES-256 public-key encryption

Declaration

procedure AddPubKeyRecipientCertificate(const CertificateDER: array of byte; Permissions: THPDFProtectOptions; HashAlgorithm: THPDFRSAOAEPHash= rohSHA256; MGFHashAlgorithm: THPDFRSAOAEPHash= rohSHA256);

Usage notes

• Call EnablePubKeyEncryption with aes256 first
• The certificate must contain an RSA public key
• RSA-OAEP digest and MGF1 digest policies are explicit and independently selectable
• The generated envelope uses AES-256-CBC for the seed and permission payload