IX509AttributeArchiveKeyHash interface (certenroll.h)
The IX509AttributeArchiveKeyHash interface represents an attribute that contains a SHA-1 hash of the encrypted private key to be archived by a certification authority. The encrypted key is attached as an unauthenticated attribute to the primary signature of a CMC request. The hash of the encrypted key is encoded as an authenticated attribute in a CMC request.
When a certification authority receives the request, it hashes the unsigned encrypted key and compares it to the signed hash sent by the requester. If the hashes match, the key was not tampered with.
Inheritance
The IX509AttributeArchiveKeyHash interface inherits from IX509Attribute. IX509AttributeArchiveKeyHash also has these types of members:
Methods
The IX509AttributeArchiveKeyHash interface has these methods.
| IX509AttributeArchiveKeyHash::get_EncryptedKeyHashBlob Retrieves a string that contains a hash of the encrypted private key. |
| IX509AttributeArchiveKeyHash::InitializeDecode Initializes the object from a Distinguished Encoding Rules (DER) encoded byte array that contains a SHA-1 hash of the encrypted private key. |
| IX509AttributeArchiveKeyHash::InitializeEncodeFromEncryptedKeyBlob Initializes the attribute from an encrypted private key. |
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client | Windows Vista [desktop apps only] |
| Minimum supported server | Windows Server 2008 [desktop apps only] |
| Target Platform | Windows |
| Header | certenroll.h |