Question

我发现这篇文章与pkcs＃7解密相关，这表明没有开箱即用的解密签名pkcs＃7文件的方法。 Decrypting PKCS#7 encrypted data in C#

但是，我也看到了这篇文章，并设法使用SignedCms类进行验证。 http://blogs.msdn.com/b/shawnfa/archive/2006/02/27/539990.aspx

在帖子结束时，使用 cms.ContentInfo.Content 提取数据似乎返回签名文件（.zip.p7）而不是实际内容（.zip）。我在这里错过了什么吗？使用充气城堡，我能够获得实际数据，但如果没有必要，我宁愿不使用第三方。

static void Main(string[] args)
{
    var encodedFile = File.ReadAllBytes(InPath);

    var signedData = new SignedCms();
    signedData.Decode(encodedFile);
    signedData.CheckSignature(true);
    if (!Verify(signedData))
        throw new Exception("No valid cert was found");

    var trueContent = new CmsSignedData(File.ReadAllBytes(InPath)).SignedContent;

    using (var str = new MemoryStream())
    {
        trueContent.Write(str);
        var zip = new ZipArchive(str, ZipArchiveMode.Read);
        zip.ExtractToDirectory(OutPath);
    }
    //using (var str = new MemoryStream(signedData.ContentInfo.Content))
    //{
    //    var zip = new ZipArchive(str, ZipArchiveMode.Read);
    //    zip.ExtractToDirectory(OutPath);
    //}

}

static bool Verify(SignedCms signedData)
{
    var myCetificates = new X509Store(StoreName.My, StoreLocation.LocalMachine);
    myCetificates.Open(OpenFlags.ReadOnly);
    var certs = signedData.Certificates;

    return (from X509Certificate2 cert in certs
        select myCetificates.Certificates.Cast<X509Certificate2>()
            .Any(crt => crt.Thumbprint == cert.Thumbprint))
        .Any();

}

更新：将返回base64示例文件。需要提出一个不包含敏感信息的内容。

更新：这是我可以使用充气城堡提取但不使用ContentInfo.Content属性的文件的基本64版本。我已经在代码中添加了一条评论，我将如何直接提取SignedCms。

MIIFfQYJKoZIhvcNAQcCoIIFbjCCBWoCAQExCzAJBgUrDgMCGgUAMIHOBgEAoIHIBIHFUEsDBBQAAAAIAGRuWEggPN74JwAAADsAAAAMAAAAdGVzdGRhdGEudHh0bcixDQAgCEXB3sQd / gq6EVFaLHz7hwHgysM / uobpvMCDOUppdbkTUEsBAj8AFAAAAAgAZG5YSCA83vgnAAAAOwAAAAwAJAAAAAAAAAAgAAAAAAAAAHRlc3RkYXRhLnR4dAoAIAAAAAAAAQAYAOAo0XGdbtEBktqpaZ1u0QGS2qlpnW7RAVBLBQYAAAAAAQABAF4AAABRAAAAAACgggL7MIIC9zCCAd + gAwIBAgIQN3SCtKd9Hp1BDqeyqVr + tjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDEwdmb28uYmFyMB4XDTE2MDIyNDAwNDg0MFoXDTM5MTIzMTIzNTk1OVowFDESMBAGA1UEAxMJcGtjczdzaWduMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5KDyFhPcxueQ1vJ0yQpcAyrSHLKw / Y2K0qhZfa7W3A6q33 / i8VLl0XOFCCJs + iwcJcC + iCOIw + fFkRUEj9d7Z1sKwBCcZMolkZtNvtdXOgphV6R3g6 / QNZgiQ3FFqHgp7 + 5OAdtBEsfsoowOClnVqZAmXnXW3Pl6Lsx0wxI8A7huytqboKRqrbRz02xO9rR1Ism0g5uQBtB2rpqGQk6 /。提前/ UYCp9fx7pxvWhe + A + oNIq7 + ijAHPNLC + bwQTGd3LhwkzMSdONpY / utdbqCqToq / IbQ7KM0NRExZL / egPCsyJ2GGBQOVCveKkzdsW5V8p2XljcI5Sq7V8lVtqR3unwIDAQABo0cwRTBDBgNVHQEEPDA6gBBZ / 6xjvqs3BLMBnQj5XmOJoRQwEjEQMA4GA1UEAxMHZm9vLmJhcoIQCiUdhpq5qrlA3FTAf3hpsTANBgkqhkiG9 w0BAQsFAAOCAQEAcYl // 1mzJa62K5uR + 8CrpsrPWHEJ1H8l25CUQGL3u4g + ANOvJsJR6nryo4us9nI7XPocJNnFCoj26qfNmWgIF5giGkQpU2gRV5bPvYc6nPj4jZaQ7RcxJ4FT1BN / 3ue7NLREodO / E1J2YWKE3uOLreBikn5B6tPKPEzA8XTjVB0ZZzfu7LMvsltB2fcaEbsifVCt4hlbtWlgFuNCbidIRWMpg8NdwcWydR1C7kuKGh1LJDG0v3ZPRgytkie8l / 9zqvki4wt / kWXmDwba0lCWoyrfyahGMq5u2cqLG45pk / + + 1L89nw3BfR1U + 5b786iXgNXKmYRWchwMQQ9r1xEa5FTGCAYYwggGCAgEBMCYwEjEQMA4GA1UEAxMHZm9vLmJhcgIQN3SCtKd9Hp1BDqeyqVr tjAJBgUrDgMCGgUAoDcwEAYJKoZIhvcNAQkDMQMGAQAwIwYJKoZIhvcNAQkEMRYEFGmRdgvd3g6DeMqXK0QfUmJq7UnFMA0GCSqGSIb3DQEBAQUABIIBAEKdfeAfyc5TAei / GWW6Ns6aAvOrVXqNkkOJessd9P2ZYSxG4CTOo300jea7o2DYruiC4FJnSPqH7NoI0Q8EAod / E7HevZnrUq2Rtga4hSZSJfgnQuJqrOJksWfysRqt86cfwQYqmlSd94e7CgmT293rGTbG8SdXxRA8qi2J + 2OULVSBFi3Z1x0hQlf31ioVBl5WMchsM8ri / q9IBBwFGqdEKVqxcmLkEtVv3czCq1z6rqkXkDk / qZ7qlhDzAqn8uguoXqhOR075Hv3Qnz6j1R + 220aCOq5CmZIzdk8o8arEA9siXUASjbQpzULpG5fAenlCrgCnAXBkzkJKsBaTbYY =

是否可以使用System.Security.Cryptography.Pkcs.SignedCms提取PKCS＃7签名文件的内容？

0 个答案: