Hello,

I'm working on an application that generates PKCS#7 SignedData structures, but 
with a slightly different format to S/MIME. We're using a version 3 SignedData 
structure, and minor changes such as no signingTime in the Authenticated 
Attributes. As such, I'm working at the level using functions such as 
PKCS7_dataInit() and PKCS7_dataFinal() functions.

Our application requires the encrypted digest's OID to be 
sha256withRSAEncryption (oid = 1.2.840.113549.1.1.11). The default however is 
the standard rsaEncryption (oid = 1.2.840.113549.1.1.1), and I can't figure out 
how to change the oid, without causing memory errors. From following the 
function calls, this default seems to come from the Private Key. Is there a way 
to do this? I've already created a new NID. I'm using sha256() as the digest 
algorithm.

Further to the above, is there a way to also implement the RSASSA-PSS signature 
scheme for signing the content?

Thanks for any help
Regards
Rob Smith
                                          

Reply via email to