PureBasic

Select the RSA Signature Scheme for Signed Email

Demonstrates the Chilkat Email.SigningAlg property, which selects the signature algorithm used when sending signed (PKCS#7) email. The default is PKCS1-v1_5; set it to RSASSA-PSS (or simply pss) to use the RSASSA-PSS scheme. This applies only when signing with an RSA private key — it has no effect for ECC or DSA keys, and the chosen scheme must be supported by the private-key provider. This example selects RSASSA-PSS.

Background: There are two common ways to build an RSA signature. The older PKCS1-v1_5 scheme is deterministic and still widely used, while RSASSA-PSS adds randomized "salt" to the padding, giving it a stronger security proof and making it the modern recommendation. This property picks the padding scheme for the signature; it is distinct from SigningHashAlg, which chooses the hash function (such as SHA-256) that the scheme signs.

Chilkat PureBasic Downloads

Download Chilkat for PureBasic

PureBasic

IncludeFile "CkEmail.pb"

Procedure ChilkatExample()

    ;  Demonstrates the Email.SigningAlg property, which selects the signature scheme used
    ;  when sending signed (PKCS#7) email.  The default is PKCS1-v1_5.  Set it to RSASSA-PSS
    ;  (or simply "pss") to use the RSASSA-PSS scheme.  This applies only to RSA signing.

    email.i = CkEmail::ckCreate()
    If email.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ;  Use the RSASSA-PSS signature scheme instead of the default PKCS1-v1_5.
    CkEmail::setCkSigningAlg(email, "RSASSA-PSS")

    Debug "SigningAlg = " + CkEmail::ckSigningAlg(email)


    CkEmail::ckDispose(email)


    ProcedureReturn
EndProcedure