IExternalDigitalSignature Interface

Implement this interface to produce the signature value with a private key that never enters the application process: a hardware security module accessed over PKCS#11 or a cloud key service such as Azure Key Vault or AWS KMS. A certificate of the system store, a smartcard or a USB token can be given directly to the PdfDigitalSignature(X509Certificate2) constructor instead. The library prepares the PDF signature structures, computes the CMS signed attributes, calls Sign(Byte) to obtain the signature value from the external device, and embeds the result. All PAdES baseline profiles are supported with external signing

Definition

Namespace: EvoPdf.Next
Assembly: EvoPdf.Next (in EvoPdf.Next.dll) Version: 14.86.0
C#
public interface IExternalDigitalSignature

Methods

GetSignatureAlgorithmName Returns the signature key algorithm name: "RSA" for RSASSA-PKCS1-v1_5, "RSASSA-PSS", "DSA" or "ECDSA". The digest of the signed attributes is the one configured in DigestAlgorithm
Sign Signs the given message, which contains the DER encoded CMS signed attributes, with the configured digest algorithm and returns the signature value produced by the external device or service. ECDSA and DSA values can be returned DER encoded or as the concatenation of r and s, the form produced by the .NET ECDsa class

See Also