 |
 | Home | Contact Us | FAQ | Search & Site Map | Link to Us |
 | Sign In | Join | Other 45 Sites in Network |
.NET Forum / Languages / C# / March 2008Signature verification
Would anyone happen to know how to determine if a digital signature used MD5 or SHA1 as the digest algorithm? I have a requirement to verify the authenticity of VeriSigned exe file, and while validating the certificate chain is simple enough, I am having a hard time figuring out how to determine what algorithm was used to generate the signature... Thanks, Dnia Mon, 17 Mar 2008 13:37:35 -0700 (PDT), Ralph.Malek@gmail.com napisał(a): > I have a requirement to verify the authenticity of VeriSigned exe > file, and while validating the certificate chain is simple enough, I > am having a hard time figuring out how to determine what algorithm was > used to generate the signature... Why don't you simply use WinVerifyTrust API function? | Maciej Oszutowski | Mowa jest srebrem | | imagiATpsytranceDOTpl | a milczenie owiec. | > Dnia Mon, 17 Mar 2008 13:37:35 -0700 (PDT), Ralph.Ma...@gmail.com > napisa³(a): [quoted text clipped - 9 lines] > | Maciej Oszutowski | Mowa jest srebrem | > | imagiATpsytranceDOTpl | a milczenie owiec. | Thanks for the reply. I looked at WinVerifyTrust, but I don't quite understand how it would be used in this situation. I was under the impression that the call would simply validate the certificate chain. In this scenario, even if the certificate is valid and the file appears to be authentic, I need to ignore it if MD5 was used instead of SHA1.
Free MagazinesGet these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...
|
Reply to this Message
|
 Sign In
 Join
 My Latest Posts My Monitored Threads My Blog My Photo Gallery My Profile My Homepage Start New Thread Enable EMail Alerts Rate this Thread
|
©2008 Advenet LLC Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.