Dear Ugo, 

I have to open a new thread because the problem has changed. People who read this thread, previous thread can be found below.

http://www.ncryptoki.com/Forums/Thread.aspx?pageid=9&mid=22&ItemID=1&thread=151

 

And for this current situation;

I kindly request you to forget SOAP message (: .

 

I have a single hash as [INPUT], doesn't mean anything but it is below.

7/X3PTLCL0QU/vU6/ZlHn58Z7AfD1dPsa2hB+7B2khA=

And i have single certificate which is imported in Virtual HSM from Local Certificate Store.

i call SignLocal method and SignWithHSM with the same hash above. However, i get different result. If i get same result, it will work because SignLocal works as expected.

 

I need this because production certificate cannot be exported and it will be in a Luna HSM so i cannot use SignLocal method in prod. environment.

 

        private static byte[] SignLocal(byte[] INPUT)
        {
            X509Certificate2 certificate = X509Certificate2_Cryptographer.LoadCertificate(StoreLocation.CurrentUser, "CN=e-Fatura Deneme A.Ş., SERIALNUMBER=9999999999, OU=e-Fatura Deneme A.Ş.");
            RSACryptoServiceProvider key = new RSACryptoServiceProvider();
            key.FromXmlString(certificate.PrivateKey.ToXmlString(true));

            byte[] signed = key.SignHash(INPUT, CryptoConfig.MapNameToOID("SHA256"));

            return signed;
        }
 

 

        public byte[] SignWithHSM(byte[] INPUT)
        {
            byte[] OUTPUT=null;
            try
            {
                // Searchs for an RSA private key object
                // Sets the template with its attributes
                CryptokiCollection template = new CryptokiCollection();

                template.Add(new ObjectAttribute(ObjectAttribute.CKA_CLASS, CryptokiObject.CKO_PRIVATE_KEY));
                template.Add(new ObjectAttribute(ObjectAttribute.CKA_KEY_TYPE, Key.CKK_RSA));
                template.Add(new ObjectAttribute(ObjectAttribute.CKA_SIGN, true));

                // Launchs the search specifying the template just created
                CryptokiCollection objects = session.Objects.Find(template, 10);
                RSAPrivateKey privateKey = null;
                // If the private keys is found continue
                if (objects.Count == 1)
                {
                    privateKey = (RSAPrivateKey)objects[0];
                }
                else if (objects.Count > 1)
                {
                    throw new Exception("Private key not found!...");
                }
                else
                {
                    throw new Exception("More than one private key found!...");
                }

                // initialize for signing
                var retval=session.SignInit(Mechanism.RSA_PKCS, privateKey);

                // sign the data to be signed
                OUTPUT = session.Sign(INPUT);

                return OUTPUT;
            }
            catch (Exception ex)
            {
                throw new Exception(ex.Message);

            }
        }
 

PS. Do you offer phone call support with your license or anyhow? I better call you. :)

 

Best Regards

Emrah

Please excuse my stupidity and answer one question.

If the certificates are same and the INPUT (hash value) is same then will both method (SignLocal, SignWithHSM) return same signature value?

I am not a guru of the crypto world, i appreciate what you do in here. Even i can accept being ignorant, however i beleive you are mistaken in one point. I really want to be wrong this time but the INPUT is the 32 bytes Digest value already. I get the digest value somewhere before the sign and send it to the methods, otherwise both method will fail.

Hi,

How did you create/calculate DigestInfo by using C#?

Is there any library that i have to use ?? OR is there any example C# code for this?

Any help would be much appreciated. Thanks...