PKCS7 SignedData Signature (embeds Signed Data)

How to create a PKCS7 signature. The resulting PKCS7 structure is encoded to a printable string using hex or base64 encoding. The data being signed is embedded within the PKCS#7 structure.

Demonstrates how to verify the signature and recover the original data.

Download: Chilkat .NET Assemblies

Dim crypt As New Chilkat.Crypt2()

'  Any string argument automatically begins the 30-day trial.
Dim success As Boolean
success = crypt.UnlockComponent("30-day trial")
If (success <> true) Then
    MsgBox("Crypt component unlock failed")
    Exit Sub
End If


Dim cert As New Chilkat.Cert()
success = cert.LoadByCommonName("Chilkat Software")
If (success <> true) Then
    MsgBox(cert.LastErrorText)
    Exit Sub
End If


'  Make sure this certificate has a private key available:
Dim bHasPrivateKey As Boolean
bHasPrivateKey = cert.HasPrivateKey()
If (bHasPrivateKey <> true) Then
    MsgBox("No private key available for signing.")
    Exit Sub
End If


'  Tell the encryption component to use this cert.
crypt.SetSigningCert(cert)

Dim strData As String
strData = "This is the data to be signed."

'  Indicate that the PKCS7 signature should be returned
'  as a base64 encoded string:
crypt.EncodingMode = "base64"

'  The EncodingMode may be set to other values such as
'  "hex", "url", "quoted-printable", etc.

Dim strSignatureWithData As String
strSignatureWithData = crypt.OpaqueSignStringENC(strData)

TextBox1.Text = TextBox1.Text & strSignatureWithData & vbCrLf

'  Now verify the signature against the original data.

'  Tell the component what certificate to use for verification.
crypt.SetVerifyCert(cert)

Dim originalData As String
originalData = crypt.OpaqueVerifyStringENC(strSignatureWithData)
If (originalData = vbNullString ) Then
    '  The signature verification failed.
    MsgBox(crypt.LastErrorText)
Else
    TextBox1.Text = TextBox1.Text & originalData & vbCrLf
    MsgBox("Signature verified!")
End If