-
1. Re: How can i add PKCS1 signature?
lrosenth Oct 14, 2009 3:22 AM (in response to ChromeUser)Why would you want to? PKCS1 is an outdated technology...
-
2. Re: How can i add PKCS1 signature?
ChromeUser Oct 14, 2009 7:21 AM (in response to lrosenth)The crypto which we have used is only support PKCS1,so we must using pkcs1 signature.
Thanks.
-
3. Re: How can i add PKCS1 signature?
lrosenth Oct 14, 2009 7:38 AM (in response to ChromeUser)That's your choice but no one has used PKCS#1 for years now - it's quite insecure and problematic.
We have a document available on our website that describes how to configure Acrobat to use PKCS1 by default - or you can set up each PDF specifically to use PKCS1 for that document.
-
4. Re: How can i add PKCS1 signature?
ChromeUser Oct 14, 2009 5:31 PM (in response to lrosenth)Thanks for your reply.
Could you tell me the document's name ?
-
5. Re: How can i add PKCS1 signature?
lrosenth Oct 14, 2009 5:54 PM (in response to ChromeUser)Something like "Acrobat Security Guide"
-
6. Re: How can i add PKCS1 signature?
ChromeUser Oct 14, 2009 7:18 PM (in response to lrosenth)Yes,in this book i found the registry about sign format.
But after i modified the registry, the signature is still pkcs7 format.
The registry value is adbe.x509.rsa_sha1,the entry is aSignFormat.
I noticed this:
"The format to use when signing a document using public key cryptography when a format is not specified by
a seed value, javascript parameter, or the PubSec Handler."There is no seed value,no javascript in doc.so i wonder if PubSec is definately pkcs7,can not be changed?
Message was edited by: ChromeUser Sorry, i have found the reason. I don't know why my acrobat is not affected by registry. I try it on annother computer it's OK.
-
7. Re: How can i add PKCS1 signature?
ChromeUser Oct 14, 2009 11:33 PM (in response to lrosenth)Another question:
Does Acrobat not support timestamp for pkcs1 signed doc?
when i signing doc by pkcs1 with timestamp there is an error:
"Error storing signature property for the selected signature format".
-
8. Re: How can i add PKCS1 signature?
lrosenth Oct 15, 2009 4:27 AM (in response to ChromeUser)I'll look into both questions and let you know...
-
9. Re: How can i add PKCS1 signature?
ChromeUser Oct 15, 2009 5:49 AM (in response to lrosenth)Thanks in advance.
BTW,this problem is appeared on Acrobat 9.0.
-
10. Re: How can i add PKCS1 signature?
Steven.Madwin Oct 19, 2009 12:37 PM (in response to ChromeUser)Hi,
The answer to your initial question (how to make Acrobat use PKCS#1) is in your previous post, which you can find at http://forums.adobe.com/thread/506159. The answer to the question does PKCS#1 support a timestamp is "no". You've got to use a PKCS#7 signature format if you want to include the timestamp. Also, you cannot include the revocation information with a PKCS#1 signature like you can with PKCS#7. It's either trying to include the revocation info and/or the timestamp that is popping the error you mentions. It's a ham fisted way of us saying that you are trying to include data that this particular signature format does not support.
Steve -
11. Re: How can i add PKCS1 signature?
ChromeUser Oct 21, 2009 6:38 PM (in response to Steven.Madwin)The second post the second thanks!



