IX509ExtensionSmimeCapabilities interface (certenroll.h)
The IX509ExtensionSmimeCapabilities interface can be used to report the decryption capabilities of an email recipient to an email sender so that the sender can choose the most secure algorithm supported by both parties. The following syntax shows the Abstract Syntax Notation One (ASN.1) structure of the extension. The extension value is encoded by using Distinguished Encoding Rules (DER) and included in the certificate request.
----------------------------------------------------------------------
-- SMIMECapabilities
-- XCN_OID_RSA_SMIMECapabilities (1.2.840.113549.1.9.15)
----------------------------------------------------------------------
SMIMECapabilities ::= SEQUENCE OF SMIMECapability
SMIMECapability ::= SEQUENCE
{
capabilityID EncodedObjectID,
smimeParameters ANY OPTIONAL
}
The extension can be initialized from a collection of ISmimeCapability objects, each of which identifies a symmetric encryption algorithm and optional key length. The following algorithms are supported.
| OID | Description |
|---|---|
| XCN_OID_OIWSEC_desCBC(1.3.14.3.2.7) | Data Encryption Standard (DES) in cipher block chaining (CBC) mode. The key length is 56 bits. |
| XCN_OID_RSA_DES_EDE3_CBC(1.2.840.113549.3.7) | Triple DES (3DES) in CBC mode. The key length is 168 bits. |
| XCN_OID_RSA_RC2CBC(1.2.840.113549.3.2) | RC2 algorithm in CBC mode. The key length is variable from 40 to 128 bits. |
| XCN_OID_RSA_RC4(1.2.840.113549.3.4) | RC4 algorithm. The key length is variable from 40 to 128 bits. |
| XCN_OID_RSA_SMIMEalgCMS3DESwrap(1.2.840.113549.1.9.16.3.6) | 3DES used for key wrapping. The key length is 168 bits. |
| XCN_OID_RSA_SMIMEalgCMSRC2wrap(1.2.840.113549.1.9.16.3.7) | RC2 used for key wrapping. The key length is 128 bits. |
| XCN_OID_NIST_AES128_CBC(2.16.840.1.101.3.4.1.2) | Advanced Encryption Standard (AES) in CBC mode. The key length is 128 bits. |
| XCN_OID_NIST_AES192_CBC(2.16.840.1.101.3.4.1.22) | AES in CBC mode. The key length is 192 bits. |
| XCN_OID_NIST_AES256_CBC(2.16.840.1.101.3.4.1.42) | AES in CBC mode. The key length is 256 bits. |
| XCN_OID_NIST_AES128_WRAP(2.16.840.1.101.3.4.1.5) | AES used for key wrapping. The key length is 128 bits. |
| XCN_OID_NIST_AES192_WRAP(2.16.840.1.101.3.4.1.25) | AES used for key wrapping. The key length is 192 bits. |
| XCN_OID_NIST_AES256_WRAP(2.16.840.1.101.3.4.1.45) | AES used for key wrapping. The key length is 256 bits. |
To add this extension object to a PKCS #10 request or a CMC request, you must first add it to an IX509Extensions collection and use the collection to initialize an IX509AttributeExtensions object. For more information, see the PKCS #10 Extensions and the CMC Extensions topics.
Inheritance
The IX509ExtensionSmimeCapabilities interface inherits from IX509Extension. IX509ExtensionSmimeCapabilities also has these types of members:
Methods
The IX509ExtensionSmimeCapabilities interface has these methods.
| IX509ExtensionSmimeCapabilities::get_SmimeCapabilities Retrieves a collection of ISmimeCapability objects. |
| IX509ExtensionSmimeCapabilities::InitializeDecode Initializes the extension from a Distinguished Encoding Rules (DER) encoded byte array that contains the extension value. (IX509ExtensionSmimeCapabilities.InitializeDecode) |
| IX509ExtensionSmimeCapabilities::InitializeEncode Initializes the extension from an ISmimeCapabilities collection. |
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client | Windows Vista [desktop apps only] |
| Minimum supported server | Windows Server 2008 [desktop apps only] |
| Target Platform | Windows |
| Header | certenroll.h |