CryptVerifySignature

This function is used to verify a signature against a hash object.

Before calling this function, the CryptCreateHash function must be called to get a handle to a hash object. The CryptHashData and/or CryptHashSessionKey functions are then used to add the data and/or session keys to the hash object.

After this function has been completed, the only hash function that can be called by using the hHash handle is the CryptDestroyHash function.

BOOL WINAPI CryptVerifySignature( 
HCRYPTHASH hHash,
BYTE *pbSignature, 
DWORD dwSigLen, 
HCRYPTKEY hPubKey,
LPCTSTR sDescription, 
DWORD dwFlags);

Parameters

• hHash
  [in] Handle to the hash object to verify against.
• pbSignature
  [in] Pointer to the signature data to be verified.
• dwSigLen
  [in] Specifies the number of bytes in the pbSignature signature data.
• hPubKey
  [in] Handle to the public key to use to authenticate the signature. This public key must belong to the key pair that was originally used to create the digital signature.
• sDescription
  [in] No longer used; set to NULL to prevent security vulnerabilities. However, it is still supported for backward compatibility in the Microsoft Base Cryptographic Provider.
• dwFlags
  [in] Specifies a bitmask of flags. This parameter is reserved for future use and should always be zero.

Return Values

TRUE indicates success. FALSE indicates failure. To get extended error information, call GetLastError. Possible values for GetLastError are described in the following table. The error values prefaced by "NTE" are generated by the particular CSP you are using.

Example

#include <wincrypt.h>

HCRYPTPROV hProv = 0;
#define BUFFER_SIZE 256
BYTE pbBuffer[BUFFER_SIZE];
HCRYPTHASH hHash = 0;
HCRYPTKEY hPubKey = 0;
BYTE *pbSignature = NULL;
DWORD dwSigLen;
LPTSTR szDescription = NULL;

// Get a handle to the default provider.
if(!CryptAcquireContext(&hProv, NULL, NULL, PROV_RSA_FULL, 0)) {
 printf("Error %x during CryptAcquireContext!\n", GetLastError());
 goto done;
}

// Load 'pbBuffer' with 'BUFFER_SIZE' bytes of test data. This must
// be the same data that was originally signed.
...
// Point 'pbSignature' at the signature created by a previous call
// to CryptSignHash. Set 'dwSigLen' to the number of bytes in the
// signature.
...

// Point 'szDescription' at the text describing the data being 
// signed. This must be the same description text that was originally
// passed to CryptSignHash.
...

// Get the public key of the user who created the digital signature 
// and import it into the CSP by using CryptImportKey. This will return
// a handle to the public key in 'hPubKey'.
...

// Create a hash object.
if(!CryptCreateHash(hProv, CALG_MD5, 0, 0, &hHash)) {
 printf("Error %x during CryptCreateHash!\n", GetLastError());
 goto done;
}

// Compute the cryptographic hash of the buffer.
if(!CryptHashData(hHash, pbBuffer, BUFFER_SIZE, 0)) {
 printf("Error %x during CryptHashData!\n", GetLastError());
 goto done;
}

// Validate the digital signature.
if(!CryptVerifySignature(hHash, pbSignature, dwSigLen, hPubKey, 
 szDescription, 0)) {
 if(GetLastError() == NTE_BAD_SIGNATURE) {
 printf("Signature not validated!\n");
 } else {
 printf("Error %x during CryptVerifySignature!\n", 
 GetLastError());
 }
} else {
 printf("Signature validated\n");
}

done:
...

// Release the public key.
if(hPubKey != 0) CryptDestroyKey(hPubKey);

// Destroy the hash object.
if(hHash != 0) CryptDestroyHash(hHash);

// Release the provider handle.
if(hProv != 0) CryptReleaseContext(hProv, 0);

Remarks

Windows CE does not support the ANSI version of this function.

Requirements

Note   This API is part of the complete Windows CE OS package as provided by Microsoft. The functionality of a particular platform is determined by the original equipment manufacturer (OEM) and some devices may not support this API.

See Also

CryptCreateHash, CryptDestroyHash, CryptHashData, CryptHashSessionKey, CryptSignHash

 Last updated on Tuesday, July 13, 2004

© 1992-2000 Microsoft Corporation. All rights reserved.