EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Authenticode functions are confusing

Also by EldoS: CallbackDisk
Create virtual disks backed by memory or custom location, expose disk images as disks and more.
#36751
Posted: 05/18/2016 09:53:59
by Tim Frost (Standard support level)
Joined: 07/20/2007
Posts: 17

We are considering writing our own 'signtool' using the PKI authenticode functions to provide just the features we need. But the sample Delphi application seems fairly ancient and only includes SHA1 signing, not the SHA256 required today, and nothing about dual signing. The SBauthenticode source file appears to support SHA256, however.

At the same time the HowTo on MS-Authenticode provides excellent documentation, and shows all the functionality we need. But the TelAuthenticodeManager described there appears nowhere in the source files, and clicking on the link to its documentation gets a 404. So we cannot base our code on these excellent examples.

Can you please explain how all this works today, and perhaps provide some HowTo documentation which matches the source that is available now?
#36752
Posted: 05/18/2016 10:11:11
by Alexander Ionov (EldoS Corp.)

Thank you for contacting us.

TElAuthenticodeManager component is available since SecureBlackbox 15 Beta. You can download it here: https://www.eldos.com/sbb/download-prerelease.php
Also, the Beta includes a new sample that shows how to work with the component.


--
Best regards,
Alexander Ionov
#36756
Posted: 05/18/2016 14:06:22
by Tim Frost (Standard support level)
Joined: 07/20/2007
Posts: 17

Thanks very much for the vey quick response. With this version I have already written a program which nearly does exactly what we need! There is one minor issue which may be a bug, so I have raised a ticket (29875).

Reply

Statistics

Topic viewed 1140 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!