THotPDF.ValidatePDFMAC Method

Validates standalone or signature-attached PDF MAC data and returns structured failure diagnostics

Declaration

function ValidatePDFMAC(const FileName: TFileName; const Password: AnsiString; out ValidationInfo: THPDFPDFMACValidationInfo): boolean; overload;
function ValidatePDFMAC(const FileName: TFileName; const Password: AnsiString; const Options: THPDFPDFMACOptions; out ValidationInfo: THPDFPDFMACValidationInfo): boolean; overload;

Usage notes

• THPDFPDFMACStatus distinguishes authentication, modification, truncation, malformed-data, and unsupported-algorithm failures
• THPDFPDFMACValidationInfo reports coverage, algorithm, digest, and authentication decisions
• THPDFPDFMACLocation distinguishes standalone, signature-attached, and unknown locations
• No decrypted plaintext is exposed before authentication succeeds
• pmsPolicyRejected distinguishes a validly parsed but disallowed digest or encryption mode
• The result reports the detected digest, selected profile, policy decision, and AES-256-GCM usage
• PermissionsAuthenticated confirms that encrypted /Perms matches /P, while MACRequiredByPermissions reports the authenticated PDF MAC requirement bit
• Attached validation resolves the active trailer SigObjRef, requires exactly one matching signature field, and verifies complete signature ByteRange coverage
• Location, SignatureObjectNumber, SignatureGeneration, FullFileCoverage, and SignatureDigestMatched report the verified attachment binding
• pmsSignatureBindingFailed distinguishes a raw signature-value digest failure from document modification

See ValidatePDFMACChain to authenticate every incremental revision, or PDF MAC Algorithm Agility and Policy Profiles for profile semantics