All, Is there a way to simply extract the message digest from a PKCS #7 signature? Here is a little back ground to hopefully explain the context. We have separate data and signature. In order to reduce memory requirements, we'd like to generate our digest while we decompress the image. After the image is decompressed, we'll extract the digest from the signature and compare. If they compare, we'd continue starting up. If the comparison failed, we'd scrub the uncompressed image from memory. The exact order might differ, since padding the generated digest might depend on the digest in the signature. However, I don't perceive those details as being insurmountable. Any help and thoughts on pitfalls to watch for will be appreciated. Thanks in advance.
-- Grant Mills [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
