.Net CryptoAPI 機能と利用法

Size: px

Start display at page:

Download ".Net CryptoAPI 機能と利用法"

ぜんすけささおか
5 years ago
Views:

1 NET CryptoAPI

2 API Part 3..NET Crypto API _api/index.html Windows CryptoAPI CryptoAPI PKI

3 CryptoAPI API CTL CryptoAPI CSP Crypto Service Provider C/C++ C/C++ Win32 C/C++ C/C++ PKCS#7 C/C++ PKCS#7 C/C++ C/C++ CryptoAPI Crypto Service Provider C/C++ Revocation Provider C/C++.NET Security.NET Framework System.Security.Cryptography C# System.Security.Cryptography.X509Certificates C# CAPICOMPInvoke C#.NET Framework

4 CryptoAPI

5 CryptoAPI API

6 CryptoAPI CMS(PKCS#7) LDAP MY ADDRESSBOOK EE CA CA ROOT CA mmc.exe

7 CryptoAPI General Cryptography Structures Common Certificate Structures X.509 Certificate Extension Structures Message Structures OID Support Structures Certificate Chain Structures CSP Structures WinTrust Structures Common Certificate Structures CERT_INFO CERT_CONTEXT CRL_INFO CRL_CONTEXT CTL_INFO CTL_CONTEXT CERT_INFO CRL CRL CRL CRL_INFO CTL CTL CTL,CTL_INFO

8 CryptoAPI CTL CMS signeddatams content Out of Band SignedData encapcontentinfo contenttype content ID certificates signerinfos CTL (SHA1) CTL

9 CryptoAPI

10 CryptoAPI CSP Crypto Service Provider Provider TypeProvider Name ProviderType Provider Type PROV_RSA_FULL PROV_RSA_SIG PROV_DSS PROV_FORTEZZA PROV_MS_EXCHANG E PROV_SSL PROV_RSA_SCHANN EL PROV_DSS_DH PROV_RSA_AES RSA KEA RSA RSA RSA DH RSA RSA RSA DSS DSS RSA RSA RSA DSS RSA RC2,RC4 Skipjack CAST RC4DES MD5,SHA DES CYLINK MEK RC2,RC4,AES MD5,SHA MD5,SHA MD5,SHA SHA MD5 MD5,SHA MD5,SHA Microsoft Base Cryptographic Provider Microsoft Strong Cryptographic Provider Microsoft Enhanced Cryptographic Provider PROV_RSA_FULL Provider Name 3

11 CryptoAPI CSP

12 CryptoAPI API CryptEnumProviders CryptAcquireContext CryptDeriveKey CryptEncrypt CryptDecrypt CryptCreateHash CryptGetHashParam CryptHashData CSP CSP

13 CryptoAPI C/C++ HCRYPTPROV hcryptprov; HCRYPTKEY hkey; BYTE *pbbuffer; // DWORD dwbuflen; // BYTE *pbhash // BYTE *dwhashlen // // CSP ::CryptAcquireContext(&hCryptProv, NULL, MS_ENHANCED_PROV, // CSP PROV_RSA_FULL, // CSP 0); // SHA1 ::CryptCreateHash(hCryptProv, CALG_SHA1, 0, 0, &hhash); ::CryptHashData(hHash, pbbuffer, dwbuflen, 0)) ::CryptGetHashParam(hHash, HP_HASHVAL, NULL, &dwhashlen, 0); pbhash = (BYTE*)malloc(dwHashLen)) ::CryptGetHashParam(hHash, HP_HASHVAL, pbhash, &dwhashlen, 0); printf("the hash is: "); for(i = 0 ; i < dwhashlen ; i++) { printf("%2.2x ",pbhash[i]); // } printf(" n"); CSP

14 CryptoAPI C/C++ HCRYPTPROV hcryptprov; HCRYPTKEY hkey; HCRYPTKEY hxchgkey; HCRYPTHASH hhash; char *szpassword = password ; BYTE *pbbuffer; // DWORD dwbufferlen; // DWORD dwcount; // /* */ // CSP ::CryptAcquireContext(&hCryptProv, NULL, MS_ENHANCED_PROV, // CSP PROV_RSA_FULL, // CSP 0); // MD5 ::CryptCreateHash(hCryptProv, CALG_SHA1, 0, 0, &hhash); // ::CryptHashData(hHash, (BYTE *)szpassword, strlen(szpassword), 0); // ::CryptDeriveKey( hcryptprov, CALG_3DES, // hhash, // KEYLENGTH_3DES CRYPT_EXPORTABLE CRYPT_NO_SALT, // &hkey); // ::CryptEncrypt(hKey, 0, TRUE, // 0, pbbuffer, // [in/out] &dwcount, // dwbufferlen); // pbbuffer ::CryptDestroyKey(hKey); // ::CryptDestroyHash(hHash); // ::CryptReleaseContext(hCryptProv, 0);// CSP DES

15 CryptoAPI C/C++ HCRYPTPROV hcryptprov; HCRYPTKEY hkey; HCRYPTKEY hxchgkey; HCRYPTHASH hhash; char *szpassword = password ; BYTE *pbbuffer; // DWORD dwcount; // hkey ::CryptDecrypt(hKey, 0, TRUE, 0, NULL, &dwcount); pbbuffer = (BYTE *)malloc(pbbuffer); ::CryptDecrypt(hKey, 0, TRUE, 0, pbbuffer, &dwcount); free(pbbuffer);

16 C/C++ CryptoAPI HCERTSTORE hcertstore; /* */ PCCERT_CONTEXT pcertcontext /* */ hcertstore = ::CertOpenSystemStore(NULL, ADDRESSBOOK ); while(pcertcontext = ::CertEnumCertificatesInStore(hCertStore, pcertcontext)) { char sznamestring[256]; ::CertGetNameString pcertcontext, CERT_NAME_RDN_TYPE, 0, /* CERT_NAME_ISSUER_FLAG */ NULL, sznamestring, 256); printf( subject : %s n, sznamestring); } ::CertFreeCertificateContext(pCertContext); ::CertCloseStore(hCertStore, CERT_CLOSE_STORE_CHECK_FLAG);

17 CryptoAPI C/C++ char szcertfile = mycert.cer PCCERT_CONTEXT pcertcontext; /* */ CFile file(szcertfile, CFile::modeRead); BYTE *pszbuf = new BYTE[file.GetLength()]; file.read(pszbuf, file.getlength()); pcertcontext = ::CertCreateCertificateContext( X509_ASN_ENCODING PKCS_7_ASN_ENCODING, pszbuf, file.getlength()); file.close(); delete(pszbuf); if (pcertcontext == NULL) { DWORD dwerr = ::GetLastError(); } X.509

18 CryptoAPI C/C++ CertCreateCertificateChainEngine CertGetCertificateChain CertVerifyRevocation Demo.

19 C/C++ CryptoAPI PKCS#7signedData CryptSignMessage CryptVerifyDetachedMessageSignature CryptVerifyMessageSignature Demo.

20 CryptoAPI PKCS#7envelopedData C/C++ CryptEncryptMessage CryptDecryptMessage CryptSignAndEncryptMessage CryptDecryptAndVerifyMessageSignature Demo.

21 CryptoAPI C/C++ PKCS #12 PFXExportCertStoreEx PFXImportCertStore PFXIsPFXBlob PFXVerifyPassword PKCS #12 PKCS #12 PKCS #12 PKCS #12 Demo.

22 CryptoAPI

23 CryptoAPI Crypto Service Provider C/C++ CSPDK Cryptographic Service Provider Developer s Toolkit advapi32.dll OS WindowsNT4.0 Demo.

24 CryptoAPI Revocation Provider C/C++ OCSP JPKILGPKI URI CRL Demo.

25 .NET Security

26 .NET Security Makecert.exe Certmgr.exe Chktrust.exe Caspol.exe Signcode.exe Permview.exe PEVerify PEverify.exe Secutil Secutil.exe Setreg.exe Cert2spc.exe Sn.exe

27 .NET Framework.NET Security

28 .NET Security System.Security.Cryptography CryptoServiceProvider MD5SHA1SHA256SHA512 DESRC2Rijndael TripleDES DSARSA PKCS#1 V1.5OAEP : HMACSHA1MACTripleDES C# HashAlgorithm RSACryptoServiceProvider C# DESCryptoServiceProvider CryptoStream Demo.

29 .NET Security System.Security.Cryptography.X50 9Certificates X509Certificate Get X509CertificateCollection X509CertificateCollection.X509Certificate Enumerator C# Demo.

30 .NET Security CAPICOM CrtpyoAPI COM CAPICOM Certificate Store Objects Digital Signature Objects Enveloped Data Objects CAB Data Encryption Objects capicom.inf capicom.dll Auxiliary Objects AlgorithmOID SettingsUtilities Interoperability ICertContext ICertStore Interfaces IChainContext Enumeration Types > regsvr32 capicom.dl PKCS #7 signeddata PKCS #7 envelopeddata PKCS #7 EncryptedData

31 .NET Security CAPICOM C# CAPICOM.StoreClass CAPICOM.Certificate CAPICOM.Certificates CAPICOM.Store CAPICOM.Certificate CAPICOM.Chain CertFindChainInStore XML CAPICOM.Store System.Security.Cryptography.X509Certificates System.Security.Cryptography.Xml PublicKeyBlobFromCertificateRawData ImportPublicKeyBlob CSP PKCS#7 CryptoAPI PInvoke Demo.

セキュリティAPIに関する技術調査 2003年版

セキュリティAPIに関する技術調査 2003年版 API Microsoft Windows Internet Explorer Outlook Visual C++ Microsoft Corp. ...1 Microsoft.NET Crypto API...1...1.NET Framework...2 Microsoft.NET Crypto API...4 API...4...5 CTL Certificate Trust List...7...8