ホーム › Security.Cryptography › CryptDecryptAndVerifyMessageSignature

CryptDecryptAndVerifyMessageSignature

関数

暗号化メッセージを復号し署名を検証して元データを取得する。

DLLCRYPT32.dll呼出規約winapiSetLastErrorあり対応OSWindows XP 以降

シグネチャ

// CRYPT32.dll
#include <windows.h>

BOOL CryptDecryptAndVerifyMessageSignature(
    CRYPT_DECRYPT_MESSAGE_PARA* pDecryptPara,
    CRYPT_VERIFY_MESSAGE_PARA* pVerifyPara,
    DWORD dwSignerIndex,
    const BYTE* pbEncryptedBlob,
    DWORD cbEncryptedBlob,
    BYTE* pbDecrypted,   // optional
    DWORD* pcbDecrypted,   // optional
    CERT_CONTEXT** ppXchgCert,   // optional
    CERT_CONTEXT** ppSignerCert   // optional
);

パラメーター

名前	型	方向
pDecryptPara	CRYPT_DECRYPT_MESSAGE_PARA*	in
pVerifyPara	CRYPT_VERIFY_MESSAGE_PARA*	in
dwSignerIndex	DWORD	in
pbEncryptedBlob	BYTE*	in
cbEncryptedBlob	DWORD	in
pbDecrypted	BYTE*	outoptional
pcbDecrypted	DWORD*	inoutoptional
ppXchgCert	CERT_CONTEXT**	outoptional
ppSignerCert	CERT_CONTEXT**	outoptional

戻り値の型: BOOL

各言語での呼び出し定義

// CRYPT32.dll
#include <windows.h>

BOOL CryptDecryptAndVerifyMessageSignature(
    CRYPT_DECRYPT_MESSAGE_PARA* pDecryptPara,
    CRYPT_VERIFY_MESSAGE_PARA* pVerifyPara,
    DWORD dwSignerIndex,
    const BYTE* pbEncryptedBlob,
    DWORD cbEncryptedBlob,
    BYTE* pbDecrypted,   // optional
    DWORD* pcbDecrypted,   // optional
    CERT_CONTEXT** ppXchgCert,   // optional
    CERT_CONTEXT** ppSignerCert   // optional
);

[return: MarshalAs(UnmanagedType.Bool)]
[DllImport("CRYPT32.dll", SetLastError = true, ExactSpelling = true)]
static extern bool CryptDecryptAndVerifyMessageSignature(
    IntPtr pDecryptPara,   // CRYPT_DECRYPT_MESSAGE_PARA*
    IntPtr pVerifyPara,   // CRYPT_VERIFY_MESSAGE_PARA*
    uint dwSignerIndex,   // DWORD
    IntPtr pbEncryptedBlob,   // BYTE*
    uint cbEncryptedBlob,   // DWORD
    IntPtr pbDecrypted,   // BYTE* optional, out
    IntPtr pcbDecrypted,   // DWORD* optional, in/out
    IntPtr ppXchgCert,   // CERT_CONTEXT** optional, out
    IntPtr ppSignerCert   // CERT_CONTEXT** optional, out
);

<DllImport("CRYPT32.dll", SetLastError:=True, ExactSpelling:=True)>
Public Shared Function CryptDecryptAndVerifyMessageSignature(
    pDecryptPara As IntPtr,   ' CRYPT_DECRYPT_MESSAGE_PARA*
    pVerifyPara As IntPtr,   ' CRYPT_VERIFY_MESSAGE_PARA*
    dwSignerIndex As UInteger,   ' DWORD
    pbEncryptedBlob As IntPtr,   ' BYTE*
    cbEncryptedBlob As UInteger,   ' DWORD
    pbDecrypted As IntPtr,   ' BYTE* optional, out
    pcbDecrypted As IntPtr,   ' DWORD* optional, in/out
    ppXchgCert As IntPtr,   ' CERT_CONTEXT** optional, out
    ppSignerCert As IntPtr   ' CERT_CONTEXT** optional, out
) As Boolean
End Function

' pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA*
' pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA*
' dwSignerIndex : DWORD
' pbEncryptedBlob : BYTE*
' cbEncryptedBlob : DWORD
' pbDecrypted : BYTE* optional, out
' pcbDecrypted : DWORD* optional, in/out
' ppXchgCert : CERT_CONTEXT** optional, out
' ppSignerCert : CERT_CONTEXT** optional, out
Declare PtrSafe Function CryptDecryptAndVerifyMessageSignature Lib "crypt32" ( _
    ByVal pDecryptPara As LongPtr, _
    ByVal pVerifyPara As LongPtr, _
    ByVal dwSignerIndex As Long, _
    ByVal pbEncryptedBlob As LongPtr, _
    ByVal cbEncryptedBlob As Long, _
    ByVal pbDecrypted As LongPtr, _
    ByVal pcbDecrypted As LongPtr, _
    ByVal ppXchgCert As LongPtr, _
    ByVal ppSignerCert As LongPtr) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

CryptDecryptAndVerifyMessageSignature = ctypes.windll.crypt32.CryptDecryptAndVerifyMessageSignature
CryptDecryptAndVerifyMessageSignature.restype = wintypes.BOOL
CryptDecryptAndVerifyMessageSignature.argtypes = [
    ctypes.c_void_p,  # pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA*
    ctypes.c_void_p,  # pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA*
    wintypes.DWORD,  # dwSignerIndex : DWORD
    ctypes.POINTER(ctypes.c_ubyte),  # pbEncryptedBlob : BYTE*
    wintypes.DWORD,  # cbEncryptedBlob : DWORD
    ctypes.POINTER(ctypes.c_ubyte),  # pbDecrypted : BYTE* optional, out
    ctypes.POINTER(wintypes.DWORD),  # pcbDecrypted : DWORD* optional, in/out
    ctypes.c_void_p,  # ppXchgCert : CERT_CONTEXT** optional, out
    ctypes.c_void_p,  # ppSignerCert : CERT_CONTEXT** optional, out
]
# GetLastError: use ctypes.GetLastError() (or ctypes.WinDLL(use_last_error=True))

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('CRYPT32.dll')
CryptDecryptAndVerifyMessageSignature = Fiddle::Function.new(
  lib['CryptDecryptAndVerifyMessageSignature'],
  [
    Fiddle::TYPE_VOIDP,  # pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA*
    Fiddle::TYPE_VOIDP,  # pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA*
    -Fiddle::TYPE_INT,  # dwSignerIndex : DWORD
    Fiddle::TYPE_VOIDP,  # pbEncryptedBlob : BYTE*
    -Fiddle::TYPE_INT,  # cbEncryptedBlob : DWORD
    Fiddle::TYPE_VOIDP,  # pbDecrypted : BYTE* optional, out
    Fiddle::TYPE_VOIDP,  # pcbDecrypted : DWORD* optional, in/out
    Fiddle::TYPE_VOIDP,  # ppXchgCert : CERT_CONTEXT** optional, out
    Fiddle::TYPE_VOIDP,  # ppSignerCert : CERT_CONTEXT** optional, out
  ],
  Fiddle::TYPE_INT)

#[link(name = "crypt32")]
extern "system" {
    fn CryptDecryptAndVerifyMessageSignature(
        pDecryptPara: *mut CRYPT_DECRYPT_MESSAGE_PARA,  // CRYPT_DECRYPT_MESSAGE_PARA*
        pVerifyPara: *mut CRYPT_VERIFY_MESSAGE_PARA,  // CRYPT_VERIFY_MESSAGE_PARA*
        dwSignerIndex: u32,  // DWORD
        pbEncryptedBlob: *const u8,  // BYTE*
        cbEncryptedBlob: u32,  // DWORD
        pbDecrypted: *mut u8,  // BYTE* optional, out
        pcbDecrypted: *mut u32,  // DWORD* optional, in/out
        ppXchgCert: *mut *mut CERT_CONTEXT,  // CERT_CONTEXT** optional, out
        ppSignerCert: *mut *mut CERT_CONTEXT  // CERT_CONTEXT** optional, out
    ) -> i32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[return: MarshalAs(UnmanagedType.Bool)]
[DllImport("CRYPT32.dll", SetLastError = true)]
public static extern bool CryptDecryptAndVerifyMessageSignature(IntPtr pDecryptPara, IntPtr pVerifyPara, uint dwSignerIndex, IntPtr pbEncryptedBlob, uint cbEncryptedBlob, IntPtr pbDecrypted, IntPtr pcbDecrypted, IntPtr ppXchgCert, IntPtr ppSignerCert);
"@
$api = Add-Type -MemberDefinition $sig -Name 'CRYPT32_CryptDecryptAndVerifyMessageSignature' -Namespace Win32 -PassThru
# $api::CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)

#uselib "CRYPT32.dll"
#func global CryptDecryptAndVerifyMessageSignature "CryptDecryptAndVerifyMessageSignature" sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr, sptr
; CryptDecryptAndVerifyMessageSignature varptr(pDecryptPara), varptr(pVerifyPara), dwSignerIndex, varptr(pbEncryptedBlob), cbEncryptedBlob, varptr(pbDecrypted), varptr(pcbDecrypted), varptr(ppXchgCert), varptr(ppSignerCert)   ; 戻り値は stat
; pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> "sptr"
; pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> "sptr"
; dwSignerIndex : DWORD -> "sptr"
; pbEncryptedBlob : BYTE* -> "sptr"
; cbEncryptedBlob : DWORD -> "sptr"
; pbDecrypted : BYTE* optional, out -> "sptr"
; pcbDecrypted : DWORD* optional, in/out -> "sptr"
; ppXchgCert : CERT_CONTEXT** optional, out -> "sptr"
; ppSignerCert : CERT_CONTEXT** optional, out -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

出力引数:

#uselib "CRYPT32.dll"
#cfunc global CryptDecryptAndVerifyMessageSignature "CryptDecryptAndVerifyMessageSignature" var, var, int, var, int, var, var, var, var
; res = CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)
; pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> "var"
; pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> "var"
; dwSignerIndex : DWORD -> "int"
; pbEncryptedBlob : BYTE* -> "var"
; cbEncryptedBlob : DWORD -> "int"
; pbDecrypted : BYTE* optional, out -> "var"
; pcbDecrypted : DWORD* optional, in/out -> "var"
; ppXchgCert : CERT_CONTEXT** optional, out -> "var"
; ppSignerCert : CERT_CONTEXT** optional, out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。#uselib "CRYPT32.dll"
#cfunc global CryptDecryptAndVerifyMessageSignature "CryptDecryptAndVerifyMessageSignature" sptr, sptr, int, sptr, int, sptr, sptr, sptr, sptr
; res = CryptDecryptAndVerifyMessageSignature(varptr(pDecryptPara), varptr(pVerifyPara), dwSignerIndex, varptr(pbEncryptedBlob), cbEncryptedBlob, varptr(pbDecrypted), varptr(pcbDecrypted), varptr(ppXchgCert), varptr(ppSignerCert))
; pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> "sptr"
; pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> "sptr"
; dwSignerIndex : DWORD -> "int"
; pbEncryptedBlob : BYTE* -> "sptr"
; cbEncryptedBlob : DWORD -> "int"
; pbDecrypted : BYTE* optional, out -> "sptr"
; pcbDecrypted : DWORD* optional, in/out -> "sptr"
; ppXchgCert : CERT_CONTEXT** optional, out -> "sptr"
; ppSignerCert : CERT_CONTEXT** optional, out -> "sptr"
; ※出力/バッファ引数はポインタ方式(token=sptr / 呼び出しは varptr(変数))。

出力引数:

; BOOL CryptDecryptAndVerifyMessageSignature(CRYPT_DECRYPT_MESSAGE_PARA* pDecryptPara, CRYPT_VERIFY_MESSAGE_PARA* pVerifyPara, DWORD dwSignerIndex, BYTE* pbEncryptedBlob, DWORD cbEncryptedBlob, BYTE* pbDecrypted, DWORD* pcbDecrypted, CERT_CONTEXT** ppXchgCert, CERT_CONTEXT** ppSignerCert)
#uselib "CRYPT32.dll"
#cfunc global CryptDecryptAndVerifyMessageSignature "CryptDecryptAndVerifyMessageSignature" var, var, int, var, int, var, var, var, var
; res = CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)
; pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> "var"
; pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> "var"
; dwSignerIndex : DWORD -> "int"
; pbEncryptedBlob : BYTE* -> "var"
; cbEncryptedBlob : DWORD -> "int"
; pbDecrypted : BYTE* optional, out -> "var"
; pcbDecrypted : DWORD* optional, in/out -> "var"
; ppXchgCert : CERT_CONTEXT** optional, out -> "var"
; ppSignerCert : CERT_CONTEXT** optional, out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。; BOOL CryptDecryptAndVerifyMessageSignature(CRYPT_DECRYPT_MESSAGE_PARA* pDecryptPara, CRYPT_VERIFY_MESSAGE_PARA* pVerifyPara, DWORD dwSignerIndex, BYTE* pbEncryptedBlob, DWORD cbEncryptedBlob, BYTE* pbDecrypted, DWORD* pcbDecrypted, CERT_CONTEXT** ppXchgCert, CERT_CONTEXT** ppSignerCert)
#uselib "CRYPT32.dll"
#cfunc global CryptDecryptAndVerifyMessageSignature "CryptDecryptAndVerifyMessageSignature" intptr, intptr, int, intptr, int, intptr, intptr, intptr, intptr
; res = CryptDecryptAndVerifyMessageSignature(varptr(pDecryptPara), varptr(pVerifyPara), dwSignerIndex, varptr(pbEncryptedBlob), cbEncryptedBlob, varptr(pbDecrypted), varptr(pcbDecrypted), varptr(ppXchgCert), varptr(ppSignerCert))
; pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> "intptr"
; pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> "intptr"
; dwSignerIndex : DWORD -> "int"
; pbEncryptedBlob : BYTE* -> "intptr"
; cbEncryptedBlob : DWORD -> "int"
; pbDecrypted : BYTE* optional, out -> "intptr"
; pcbDecrypted : DWORD* optional, in/out -> "intptr"
; ppXchgCert : CERT_CONTEXT** optional, out -> "intptr"
; ppSignerCert : CERT_CONTEXT** optional, out -> "intptr"
; ※出力/バッファ引数はポインタ方式(token=intptr / 呼び出しは varptr(変数))。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	crypt32 = windows.NewLazySystemDLL("CRYPT32.dll")
	procCryptDecryptAndVerifyMessageSignature = crypt32.NewProc("CryptDecryptAndVerifyMessageSignature")
)

// pDecryptPara (CRYPT_DECRYPT_MESSAGE_PARA*), pVerifyPara (CRYPT_VERIFY_MESSAGE_PARA*), dwSignerIndex (DWORD), pbEncryptedBlob (BYTE*), cbEncryptedBlob (DWORD), pbDecrypted (BYTE* optional, out), pcbDecrypted (DWORD* optional, in/out), ppXchgCert (CERT_CONTEXT** optional, out), ppSignerCert (CERT_CONTEXT** optional, out)
r1, _, err := procCryptDecryptAndVerifyMessageSignature.Call(
	uintptr(pDecryptPara),
	uintptr(pVerifyPara),
	uintptr(dwSignerIndex),
	uintptr(pbEncryptedBlob),
	uintptr(cbEncryptedBlob),
	uintptr(pbDecrypted),
	uintptr(pcbDecrypted),
	uintptr(ppXchgCert),
	uintptr(ppSignerCert),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // BOOL

function CryptDecryptAndVerifyMessageSignature(
  pDecryptPara: Pointer;   // CRYPT_DECRYPT_MESSAGE_PARA*
  pVerifyPara: Pointer;   // CRYPT_VERIFY_MESSAGE_PARA*
  dwSignerIndex: DWORD;   // DWORD
  pbEncryptedBlob: Pointer;   // BYTE*
  cbEncryptedBlob: DWORD;   // DWORD
  pbDecrypted: Pointer;   // BYTE* optional, out
  pcbDecrypted: Pointer;   // DWORD* optional, in/out
  ppXchgCert: Pointer;   // CERT_CONTEXT** optional, out
  ppSignerCert: Pointer   // CERT_CONTEXT** optional, out
): BOOL; stdcall;
  external 'CRYPT32.dll' name 'CryptDecryptAndVerifyMessageSignature';

result := DllCall("CRYPT32\CryptDecryptAndVerifyMessageSignature"
    , "Ptr", pDecryptPara   ; CRYPT_DECRYPT_MESSAGE_PARA*
    , "Ptr", pVerifyPara   ; CRYPT_VERIFY_MESSAGE_PARA*
    , "UInt", dwSignerIndex   ; DWORD
    , "Ptr", pbEncryptedBlob   ; BYTE*
    , "UInt", cbEncryptedBlob   ; DWORD
    , "Ptr", pbDecrypted   ; BYTE* optional, out
    , "Ptr", pcbDecrypted   ; DWORD* optional, in/out
    , "Ptr", ppXchgCert   ; CERT_CONTEXT** optional, out
    , "Ptr", ppSignerCert   ; CERT_CONTEXT** optional, out
    , "Int")   ; return: BOOL

●CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert) = DLL("CRYPT32.dll", "bool CryptDecryptAndVerifyMessageSignature(void*, void*, dword, void*, dword, void*, void*, void*, void*)")
# 呼び出し: CryptDecryptAndVerifyMessageSignature(pDecryptPara, pVerifyPara, dwSignerIndex, pbEncryptedBlob, cbEncryptedBlob, pbDecrypted, pcbDecrypted, ppXchgCert, ppSignerCert)
# pDecryptPara : CRYPT_DECRYPT_MESSAGE_PARA* -> "void*"
# pVerifyPara : CRYPT_VERIFY_MESSAGE_PARA* -> "void*"
# dwSignerIndex : DWORD -> "dword"
# pbEncryptedBlob : BYTE* -> "void*"
# cbEncryptedBlob : DWORD -> "dword"
# pbDecrypted : BYTE* optional, out -> "void*"
# pcbDecrypted : DWORD* optional, in/out -> "void*"
# ppXchgCert : CERT_CONTEXT** optional, out -> "void*"
# ppSignerCert : CERT_CONTEXT** optional, out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。