Archive for the ‘Authenticode’ Category

The Demise of CAPICOM

Wednesday, October 15th, 2008

CAPICOM, a COM-based wrapper for the CryptoAPI library, is deprecated and on its way out. However, Microsoft has no time line for phasing it out, nor have they provided sufficient documentation of alternatives. Many CAPICOM pages contain a confusing, bright-red header along the lines of: [The SignedCode object is available for ...

Stripping an Authenticode Signature

Friday, September 12th, 2008

We needed to modify the resources of an installer and then apply an Authenticode signature. Unfortunately, it already had a signature on it, and modifying the resources of an executable with a signature results in a corrupted signature. The Microsoft signing tools cannot recover from this situation, so: It ...

mssign32.dll

Thursday, September 11th, 2008

With CAPICOM deprecated, MSDN suggests using the mssign32.dll functions. There are two fundamental problems with this: No example code whatsoever is provided. No header file is provided. Well, at least I can do something about #2. Here is a minimal version of a header file for mssign32.dll. It includes direct ...