[Cryptlib] XYZZY cert and sha256RSA

[Bill Hansen]

Hi all,

I use cryptlib version 3.4.2 to generate XYZZY certificates for use in AS2.
I use various techniques to meet specific requirements. For example, I can
override CRYPT_CERTINFO_VALIDTO by deleting it and resetting it. Or I can
specify CRYPT_CTXINFO_KEYSIZE in the context with which I sign the cert.

But is there a way to generate an XYZZY certificate with a signature
algorithm of sha256RSA and a signature hash algorithm of sha256? I haven't
found a way so far; all I ever get is sha1RSA and sha1.

Please advise, WAH

P.S. If this is not possible via XYZZY, what would be the simplest approach
to this problem at a lower level in cryptlib?

[Peter Gutmann]

I use cryptlib version 3.4.2 to generate XYZZY certificates for use in AS2. I
use various techniques to meet specific requirements. For example, I can
override CRYPT_CERTINFO_VALIDTO by deleting it and resetting it. Or I can
specify CRYPT_CTXINFO_KEYSIZE in the context with which I sign the cert.
But is there a way to generate an XYZZY certificate with a signature
algorithm of sha256RSA and a signature hash algorithm of sha256? I haven't
found a way so far; all I ever get is sha1RSA and sha1.

All of those are configurable via standard config options,
CRYPT_OPTION_ENCR_HASH for the hash algorithm, CRYPT_OPTION_CERT_VALIDITY for
the validity period, and CRYPT_OPTION_PKC_KEYSIZE for the key size.

Peter.