Discuss this help topic in SecureBlackbox Forum

PKIBlackbox package

PKIBlackbox includes the components and functions, related to Public Key Infrastructure. This includes X.509 certificates, CRLs (certificate revocation lists), certificate requests, certificate storages.

PKIBlackbox includes classes for accessing and using cryptographic hardware (USB tokens, smartcards) via CryptoAPI or PKCS#11 interfaces.

With PKIBlackbox you can perform digital signing, timestamping and encryption of the data using PKCS#7 standard.

PKIBlackbox includes the following components:

Component name Summary X.509 certificates TElX509Certificate Main certificate class which provides methods to generate the certificate and a private key, load and save the certificate to/from different formats and validate the child certificate with CA certificate. Certificate storages TElCustomCertStorage The base certificate storage class that holds one or many certificates, lets you validate certificates and load and save them to/from various formats. Descendants of this class implement actual containers for the certificates being held. TElMemoryCertStorage The class extends TElCustomCertStorage and lets you hold the certificates in memory. TElWinCertStorage Provides access to certificates via Windows CryptoAPI. TElPKCS11CertStorage Provides access to certificate storages via PKCS#11 API CRL and CRL extensions TElCertificateRevocationList This class represents a CertificateRevocation List (CRL). OCSP TElOCSPClient Provides client-side functionality for Online Certificate Status Protocol (OCSP). TElOCSPServer Provides server-side functionality for Online Certificate Status Protocol (OCSP). TElHTTPOCSPClient Implements OCSP (online certificate status protocol) functionality over HTTP transport. TElFileOCSPClient Implements OCSP client-side protocol functionality with file transport. CMS TElSignedCMSMessage Represents a signed message according to Crytographic Message Syntax (CMS) standard. Simple data security TElMessageEncryptor This class is used to encrypt blocks of data and save encrypted data in PKCS#7 format. TElMessageDecryptor This class is used to decrypt data saved in PKCS#7 format. TElMessageSigner This class is used to sign the data and save the signed data in PKCS7 format. TElMessageVerifier This class is used to verify digital signature for a signed data. PKI-based timestamping TElFileTSPClient Implements TSP client functionality with file transport. TElFileTSPServer Implements TSP-server functionality with file transport. TElHTTPTSPClient Implements TSP protocol functionality and sends requests to the server using HTTP transport. Authenticode TElAuthenticodeManager This class is used to sign and countersign EXE and DLL files with certificates, verify the signatures and remove them.

Supplementary classes included into PKIBlackbox are

Class name Summary X.509 certificates TElX509CertificateChain Represents a chain of X.509 certificates. TElCertificateLookup This class is designed for searching certificates in storage. TElCertificateRequest This class represents information stored in certificate request in PKCS#10 format. TElAccessDescription Defines single Access Description element in Authority Information Access extension. TElDistributionPoint Contains information about single distribution point. TElEDIPartyName This class is used to keep the EDI (Electronic Data Interchange) Party Name. TElGeneralName This class is used to store various information about identity. TElGeneralNames Represents a list of TElGeneralName objects. TElNameConstraint This class is used to store information about a single Permitted/Excluded tree. TElOtherName This class is used to contain various data in form of «ObjectID = Value» which represent "names". TElPolicyMapping This class corresponds to a single Policy Mapping. TElRelativeDistinguishedName This class is used to contain various data in form of «Object Identifier = Value» which represent "names". TElSinglePolicyInformation Provides storing information about a single certificate policy. TElUserNotice Represents a user notice, which is displayed to a relying party when a certificate is used. Certificate storages TElFileCertStorage Provides access to certificate storages stored in files (PKCS#7 file format) TElPKCS11SessionInfo Provides information about a session established with a security token. TElPKCS11SlotInfo This class provides information about the slot and the token plugged in at the moment. TElPKCS11Module Provides functionality to access the cryptographic token. TElPKCS11Manager TElPKCS11Manager provides functionality to manage Cryptoki objects. TElPKCS11ManagerObject This class represents a PKCS#11 object: data, a certificate, or a key, stored on cryptographic token. TElPKCS11ManagerDataObject This class represents a data object stored on cryptographic token TElPKCS11ManagerCertificateObject This class represents a certificate stored on cryptographic token. TElPKCS11ManagerKeyObject This class represents a key stored on cryptographic token. TElPKCS11ManagerPublicKeyObject This class represents a public key stored on cryptographic token. TElPKCS11ManagerPrivateKeyObject This class represents a private key stored on cryptographic token. TElPKCS11ManagerSecretKeyObject This class represents a secret key stored on cryptographic token. Certificate extensions TElCustomExtension The base class for other certificate extensions. TElNetscapeString The base class for certificate extensions classes which main point is one string. TElCertificateExtensions This class stores extensions of a single X.509 certificate. TElAlternativeNameExtension Represents an Alternative Name extension. TElAuthorityInformationAccessExtension The authority information access extension indicates how to access CA information for the issuer of the certificate. TElAuthorityKeyIdentifierExtension This extension is used to keep a «Fingerprint» of issuer's public key. TElBasicConstraintsExtension The basic constraints extension defines whether the subject of the certificate is a CA and how deep the certification path starting from this CA may be. TElCertificatePoliciesExtension Represents a Certificate Policies extension. TElCRLDistributionPointsExtension Represents a CRL Distribution Points extension. TElExtendedKeyUsageExtension Represents an Extended Key Usage extension. TElKeyUsageExtension This extension defines the purpose of the key contained in the certificate. TElNameConstraintsExtension Indicates a name space within which all subject names in subsequent certificates in a certification path shall be located. TElNetscapeCertTypeExtension Specifies the intended purpose of certificate. TElPolicyConstraintsExtension Represents a Policy Constraints extension. TElPolicyMappingsExtension Represents a Policy Mappings extension. TElPrivateKeyUsagePeriodExtension Represents a Private Key Usage Period extension. TElSubjectKeyIdentifierExtension Represents a Subject Key Identifier extension. TElSubjectDirectoryAttributesExtension Represents a Subject Directory Attributes extension. CRL and CRL extensions TElRevocationItem This class represents each certificate in the CRL. TElCRLExtension The base class for all CRL extensions. ELCRLExtensions This class is used to specify the extensions of the CRL itself. TElCRLEntryExtensions Specifies extensions for each certificate information item in the CRL. TElAuthorityKeyIdentifierCRLExtension Represents a Authority Key Identifier CRL extension. TElCertificateIssuerCRLExtension This extension is used to identify the certificate issuer. TElCRLNumberCRLExtension This extension contains a CRL Number. TElDeltaCRLIndicatorCRLExtension This extension contains delta CRL indicator. TElHoldInstructionCodeCRLExtension This extension is contains a registered instruction identifier which indicates the action to be taken after encountering a certificate that has been placed on hold. TElInvalidityDateCRLExtension This extension contains the date of the certificate compromise. TElReasonCodeCRLExtension This extension contains the reason of the certificate revocation. OCSP TElOCSPResponse Represents a single response from OCSP server. TElOCSPResponderID Identifies an OCSP responder. TElOCSPSingleResponse This class represents a SingleResponse element of the Responses list contained in the OCSP response. CMS TElCMSSignature Represents a CMS signature. TElASN1DirectoryString Represents an ASN.1 string used in X.500 directory services. TElCMSCertificateRefs Provides functionality to store and manage the list of certificate identifiers. TElCMSCommitmentTypeIndication Stores information about the commitment type of a CMS signature. TElCMSContent Stores content of a CMS message. TElCMSContentHints Stores the description of the CMS message content. TElCMSContentReference References the content of the CMS message. TElCMSCRLIdentifier This class contains identifier of the CRL. TElCMSCRLValidatedID This class stores information which identifies a CRL. TElCMSHash This class serves to keep the hash calculated on some data. TElCMSMessage The base class for TElSignedCMSMessage. It provides basic functionality to create, open, and save a CMS message. TElCMSOCSPIdentifier This class identifies an OCSP responce. TElCMSOCSPResponsesID This class represents an identifier of the OCSP response. TElCMSProperty The base class for all properties of the CMS signature. TElCMSRevocationRef This class stores references to various revocation information. TElCMSRevocationRefs Represents a list of TElCMSRevocationRef elements. TElCMSRevocationValues Stores all revocation information of the CMS signature. TElCMSSignaturePolicy Stores information about the signature policy of a CMS signature. TElCMSSignerIdentifier This class stores information about the signer. TElCMSSignerLocation Stores information about signer's location. TElCMSSigningCertificate Containes a list of references to certificates and digest values computed on them. TElCMSSigPolicyQualifier Contains additional information qualifying the signature policy identifier. TElCMSTimestamp Represents a timestamp to be used with CMS signatures. Simple data security TElPKCS7Attributes This class is used to store auxiliary information for a signed message. TElPKCS7Issuer This class is used as a certificate identifier. TElPKCS7Signer Identifies message signer according to PKCS#7 standard. PKI-based timestamping TElCustomTSPServer Implements functionality common for all TSP servers. TElCustomTSPClient Provides common interface for all TSP clients. TElTSPInfo This class is a container for storing parameters for or from timestamp signature. TElClientTSPInfo Contains parameters to be sent to the server or the ones received in the server response. TElServerTSPInfo Provides access to timestamp parameters. Low-level cryptography TElKeyMaterial The base class for all key material classes. It provides base interface for accessing the containers for public/private and secret key data, stored as a sequence of bytes. Asymmetric (public key based) TElPublicKeyCryptoFactory This class is used to create instances of algorithm-specific TElPublicKeyCrypto classes. TElPublicKeyMaterial Descendants of this class are responsible for storing key material for particular public key encryption algorithms. TElPublicKeyCrypto This class is an ancestor for classes that implement particular public key encryption algorithms. TElRSAKeyMaterial This class is responsible for storing RSA key material. TElRSAPublicKeyCrypto This class is responsible for cryptographic computations according to RSA algorithm specification (PKCS#1). TElDSAKeyMaterial This class is responsible for storing DSA key material. TElDSAPublicKeyCrypto This class is responsible for cryptographic computations according to DSA (DSS) specification (FIPS186-2). TElElGamalKeyMaterial This class is responsible for storing TElGamal key material. TElElGamalPublicKeyCrypto This class is responsible for cryptographic computations implicating the ElGamal signature algorithm. Symmetric (secret key based) TElSymmetricCryptoFactory This class is used to create instances of algorithm-specific TElSymmetricCrypto classes. TElSymmetricKeyMaterial This class is responsible for storing key material for symmetric encryption algorithms. TElHMACKeyMaterial This class is responsible for storing key material for HMAC algorithm. TElHashFunction Provides functionality for hash computation. TElSymmetricCrypto This class is a base class for all symmetric encryption classes. TEl3DESSymmetricCrypto This class provides functionality for encryption and decryption using 3DES (TripleDES) block symmetric algorithm. TElAESSymmetricCrypto This class provides functionality for encryption and decryption using AES block symmetric algorithm. TElBlowfishSymmetricCrypto This class provides functionality for encryption and decryption using Blowfish block symmetric algorithm. TElCamelliaSymmetricCrypto This class provides functionality for encryption and decryption using Camellia block symmetric algorithm. TElCAST128SymmetricCrypto This class provides functionality for encryption and decryption using CAST128 block symmetric algorithm. TElDESSymmetricCrypto This class provides functionality for encryption and decryption using DES block symmetric algorithm. TElIDEASymmetricCrypto This class provides functionality for encryption and decryption using IDEA block symmetric algorithm. TElRC2SymmetricCrypto This class provides functionality for encryption and decryption using RC2 block symmetric algorithm. TElRC4SymmetricCrypto This class provides functionality for encryption and decryption using RC4 block symmetric algorithm. TElSerpentSymmetricCrypto This class provides functionality for encryption and decryption using Serpent block symmetric algorithm. TElTwofishSymmetricCrypto This class provides functionality for encryption and decryption using Twofish block symmetric algorithm. Crypto providers TElCustomCryptoProvider This is a basic class for all Crypto Providers. TElBuiltInCryptoProvider This class represents a built-in SecureBlackbox crypto provider. TElWin32CryptoProvider This class represents a Win32 crypto provider. TElPKCS11CryptoProvider This class represents a PKCS#11 crypto provider. TElDLLCryptoProvider This class represents a DLL crypto provider.

Discuss this help topic in SecureBlackbox Forum