CAPICOM

為了支持密碼編譯功能，微軟在 Windows API 之中加入了 Cryptographic API (CryptoAPI)??，然而 CryptoAPI 的使用方法相當複雜，為了簡化 CryptoAPI 的使用，微軟即將它以 COM 的方式包裝成 CAPICOM?，讓應用程式只需要利用 COM 調用方式，即可使用 CryptoAPI。

基本介紹

• 中文名：CAPICOM
• 外文名： Cryptographic API Component Object Model
• 性質：安全組件
• 最新版本：2.1.0.2

CAPICOM 的全名是 Cryptographic API Component Object Model ，是 微軟的Windows作業系統里的一個安全組件，是一系列對普通CryptoAPI 2.0功能進行包裝的COM類，可以在Windows環境下各種語言中使用。通過CAPICOM可以讓計算機以數字方式簽署數據、代碼、驗證數字簽章、將數據報文裝起來做為私人之用、雜湊數據、將數據加密/解密等。?

儘管可以直接訪問CryptoAPI，但有時使用CAPICOM對象還是要容易些，而且，CAPICOM中的大多數接口都是“腳本安全”的，這意味著你可以在瀏覽器網頁腳本中安全地使用這些接口所提供的功能（當然，只限在IE瀏覽器中使用）。

最新版本的CAPICOM是2.1.0.2。注意：由於這個版本修正了之前版本中的一個嚴重的安全漏洞，所以應儘量使用新版本的。

新版CAPICOM主要能提供以下安全特性：

1、產生和驗證PKCS#7格式的數字簽名；

2、使用證書加密/解密數據；

3、使用口令加密/解密數據；

4、生成不可預測性良好的隨機數；

5、產生和驗證代碼簽名；

6、支持檔案形式的證書；

7、快速證書搜尋；

8、產生任意數據的哈希值；

9、高級證書屬性，例如：政策、模板。

支持的對稱加密算法包括：RC2、RC4、DES、3DES和高級加密標準（AES，所謂的“軍方曾用標準”算法，選用此算法需要Windows Server 2003 或 Windows XP支持）。

支持的密匙算法包括：RSA和DSS。

支持的哈希散列算法包括：SHA-1、MD2、MD4、MD5、SHA-256、SHA-384、SHA-512。注意前四種算法目前都已經被攻破，在某些用途下不算安全了。

也支持自定義算法。

CAPICOM是重分發組件，也就是說它沒有被默認包含在作業系統中，需要單獨安裝註冊該組件。

可下載Platform SDK Redistributable: CAPICOM 再分發包及示例

檔案名稱：capicom_dc_sdk.msi

版本：2.1.0.2

發布日期：2007/5/8

語言：英語

下載檔案大小：1.8 MB

CAPICOM; // CAPICOM v2.1 Type Library

Enum CAPICOM_ERROR_CODE;

CAPICOM_E_ENCODE_INVALID_TYPE = $80880100;

CAPICOM_E_EKU_INVALID_OID = $80880200;

CAPICOM_E_EKU_OID_NOT_INITIALIZED = $80880201;

CAPICOM_E_CERTIFICATE_NOT_INITIALIZED = $80880210;

CAPICOM_E_CERTIFICATE_NO_PRIVATE_KEY = $80880211;

CAPICOM_E_CHAIN_NOT_BUILT = $80880220;

CAPICOM_E_STORE_NOT_OPENED = $80880230;

CAPICOM_E_STORE_EMPTY = $80880231;

CAPICOM_E_STORE_INVALID_OPEN_MODE = $80880232;

CAPICOM_E_STORE_INVALID_SAVE_AS_TYPE = $80880233;

CAPICOM_E_ATTRIBUTE_NAME_NOT_INITIALIZED = $80880240;

CAPICOM_E_ATTRIBUTE_VALUE_NOT_INITIALIZED = $80880241;

CAPICOM_E_ATTRIBUTE_INVALID_NAME = $80880242;

CAPICOM_E_ATTRIBUTE_INVALID_VALUE = $80880243;

CAPICOM_E_SIGNER_NOT_INITIALIZED = $80880250;

CAPICOM_E_SIGNER_NOT_FOUND = $80880251;

CAPICOM_E_SIGNER_NO_CHAIN = $80880252;

CAPICOM_E_SIGNER_INVALID_USAGE = $80880253;

CAPICOM_E_SIGN_NOT_INITIALIZED = $80880260;

CAPICOM_E_SIGN_INVALID_TYPE = $80880261;

CAPICOM_E_SIGN_NOT_SIGNED = $80880262;

CAPICOM_E_INVALID_ALGORITHM = $80880270;

CAPICOM_E_INVALID_KEY_LENGTH = $80880271;

CAPICOM_E_ENVELOP_NOT_INITIALIZED = $80880280;

CAPICOM_E_ENVELOP_INVALID_TYPE = $80880281;

CAPICOM_E_ENVELOP_NO_RECIPIENT = $80880282;

CAPICOM_E_ENVELOP_RECIPIENT_NOT_FOUND = $80880283;

CAPICOM_E_ENCRYPT_NOT_INITIALIZED = $80880290;

CAPICOM_E_ENCRYPT_INVALID_TYPE = $80880291;

CAPICOM_E_ENCRYPT_NO_SECRET = $80880292;

CAPICOM_E_NOT_SUPPORTED = $80880900;

CAPICOM_E_UI_DISABLED = $80880901;

CAPICOM_E_CANCELLED = $80880902;

CAPICOM_E_NOT_ALLOWED = $80880903;

CAPICOM_E_OUT_OF_RESOURCE = $80880904;

CAPICOM_E_INTERNAL = $80880911;

CAPICOM_E_UNKNOWN = $80880999;

CAPICOM_E_PRIVATE_KEY_NOT_INITIALIZED = $80880300;

CAPICOM_E_PRIVATE_KEY_NOT_EXPORTABLE = $80880301;

CAPICOM_E_ENCODE_NOT_INITIALIZED = $80880320;

CAPICOM_E_EXTENSION_NOT_INITIALIZED = $80880330;

CAPICOM_E_PROPERTY_NOT_INITIALIZED = $80880340;

CAPICOM_E_FIND_INVALID_TYPE = $80880350;

CAPICOM_E_FIND_INVALID_PREDEFINED_POLICY = $80880351;

CAPICOM_E_CODE_NOT_INITIALIZED = $80880360;

CAPICOM_E_CODE_NOT_SIGNED = $80880361;

CAPICOM_E_CODE_DESCRIPTION_NOT_INITIALIZED = $80880362;

CAPICOM_E_CODE_DESCRIPTION_URL_NOT_INITIALIZED = $80880363;

CAPICOM_E_CODE_INVALID_TIMESTAMP_URL = $80880364;

CAPICOM_E_HASH_NO_DATA = $80880370;

CAPICOM_E_INVALID_CONVERT_TYPE = $80880380;

Enum CAPICOM_ENCODING_TYPE;

CAPICOM_ENCODE_BASE64 = 0;

CAPICOM_ENCODE_BINARY = 1;

CAPICOM_ENCODE_ANY = -1;

Enum CAPICOM_EKU;

CAPICOM_EKU_OTHER = 0;

CAPICOM_EKU_SERVER_AUTH = 1;

CAPICOM_EKU_CLIENT_AUTH = 2;

CAPICOM_EKU_CODE_SIGNING = 3;

CAPICOM_EKU_EMAIL_PROTECTION = 4;

CAPICOM_EKU_SMARTCARD_LOGON = 5;

CAPICOM_EKU_ENCRYPTING_FILE_SYSTEM = 6;

Enum CAPICOM_CHECK_FLAG;

CAPICOM_CHECK_NONE = 0;

CAPICOM_CHECK_TRUSTED_ROOT = 1;

CAPICOM_CHECK_TIME_VALIDITY = 2;

CAPICOM_CHECK_SIGNATURE_VALIDITY = 4;

CAPICOM_CHECK_ONLINE_REVOCATION_STATUS = 8;

CAPICOM_CHECK_OFFLINE_REVOCATION_STATUS = 16;

CAPICOM_CHECK_COMPLETE_CHAIN = 32;

CAPICOM_CHECK_NAME_CONSTRAINTS = 64;

CAPICOM_CHECK_BASIC_CONSTRAINTS = 128;

CAPICOM_CHECK_NESTED_VALIDITY_PERIOD = $100;

CAPICOM_CHECK_ONLINE_ALL = $1EF;

CAPICOM_CHECK_OFFLINE_ALL = $1F7;

Enum CAPICOM_CERT_INFO_TYPE;

CAPICOM_CERT_INFO_SUBJECT_SIMPLE_NAME = 0;

CAPICOM_CERT_INFO_ISSUER_SIMPLE_NAME = 1;

CAPICOM_CERT_INFO_SUBJECT_EMAIL_NAME = 2;

CAPICOM_CERT_INFO_ISSUER_EMAIL_NAME = 3;

CAPICOM_CERT_INFO_SUBJECT_UPN = 4;

CAPICOM_CERT_INFO_ISSUER_UPN = 5;

CAPICOM_CERT_INFO_SUBJECT_DNS_NAME = 6;

CAPICOM_CERT_INFO_ISSUER_DNS_NAME = 7;

Enum CAPICOM_STORE_LOCATION;

CAPICOM_MEMORY_STORE = 0;

CAPICOM_LOCAL_MACHINE_STORE = 1;

CAPICOM_CURRENT_USER_STORE = 2;

CAPICOM_ACTIVE_DIRECTORY_USER_STORE = 3;

CAPICOM_SMART_CARD_USER_STORE = 4;

Enum CAPICOM_STORE_OPEN_MODE;

CAPICOM_STORE_OPEN_READ_ONLY = 0;

CAPICOM_STORE_OPEN_READ_WRITE = 1;

CAPICOM_STORE_OPEN_MAXIMUM_ALLOWED = 2;

CAPICOM_STORE_OPEN_EXISTING_ONLY = 128;

CAPICOM_STORE_OPEN_INCLUDE_ARCHIVED = $100;

Enum CAPICOM_ACTIVE_DIRECTORY_SEARCH_LOCATION;

CAPICOM_SEARCH_ANY = 0;

CAPICOM_SEARCH_GLOBAL_CATALOG = 1;

CAPICOM_SEARCH_DEFAULT_DOMAIN = 2;

Enum CAPICOM_STORE_SAVE_AS_TYPE;

CAPICOM_STORE_SAVE_AS_SERIALIZED = 0;

CAPICOM_STORE_SAVE_AS_PKCS7 = 1;

Enum CAPICOM_ATTRIBUTE;

CAPICOM_AUTHENTICATED_ATTRIBUTE_SIGNING_TIME = 0;

CAPICOM_AUTHENTICATED_ATTRIBUTE_DOCUMENT_NAME = 1;

CAPICOM_AUTHENTICATED_ATTRIBUTE_DOCUMENT_DESCRIPTION = 2;

Enum CAPICOM_SIGNED_DATA_VERIFY_FLAG;

CAPICOM_VERIFY_SIGNATURE_ONLY = 0;

CAPICOM_VERIFY_SIGNATURE_AND_CERTIFICATE = 1;

Enum CAPICOM_ENCRYPTION_ALGORITHM;

CAPICOM_ENCRYPTION_ALGORITHM_RC2 = 0;

CAPICOM_ENCRYPTION_ALGORITHM_RC4 = 1;

CAPICOM_ENCRYPTION_ALGORITHM_DES = 2;

CAPICOM_ENCRYPTION_ALGORITHM_3DES = 3;

CAPICOM_ENCRYPTION_ALGORITHM_AES = 4;

Enum CAPICOM_ENCRYPTION_KEY_LENGTH;

CAPICOM_ENCRYPTION_KEY_LENGTH_MAXIMUM = 0;

CAPICOM_ENCRYPTION_KEY_LENGTH_40_BITS = 1;

CAPICOM_ENCRYPTION_KEY_LENGTH_56_BITS = 2;

CAPICOM_ENCRYPTION_KEY_LENGTH_128_BITS = 3;

CAPICOM_ENCRYPTION_KEY_LENGTH_192_BITS = 4;

CAPICOM_ENCRYPTION_KEY_LENGTH_256_BITS = 5;

Enum CAPICOM_SECRET_TYPE;

CAPICOM_SECRET_PASSWORD = 0;

Enum CAPICOM_KEY_ALGORITHM;

CAPICOM_KEY_ALGORITHM_OTHER = 0;

CAPICOM_KEY_ALGORITHM_RSA = 1;

CAPICOM_KEY_ALGORITHM_DSS = 2;

Enum CAPICOM_OID;

CAPICOM_OID_OTHER = 0;

CAPICOM_OID_AUTHORITY_KEY_IDENTIFIER_EXTENSION = 1;

CAPICOM_OID_KEY_ATTRIBUTES_EXTENSION = 2;

CAPICOM_OID_CERT_POLICIES_95_EXTENSION = 3;

CAPICOM_OID_KEY_USAGE_RESTRICTION_EXTENSION = 4;

CAPICOM_OID_LEGACY_POLICY_MAPPINGS_EXTENSION = 5;

CAPICOM_OID_SUBJECT_ALT_NAME_EXTENSION = 6;

CAPICOM_OID_ISSUER_ALT_NAME_EXTENSION = 7;

CAPICOM_OID_BASIC_CONSTRAINTS_EXTENSION = 8;

CAPICOM_OID_SUBJECT_KEY_IDENTIFIER_EXTENSION = 9;

CAPICOM_OID_KEY_USAGE_EXTENSION = 10;

CAPICOM_OID_PRIVATEKEY_USAGE_PERIOD_EXTENSION = 11;

CAPICOM_OID_SUBJECT_ALT_NAME2_EXTENSION = 12;

CAPICOM_OID_ISSUER_ALT_NAME2_EXTENSION = 13;

CAPICOM_OID_BASIC_CONSTRAINTS2_EXTENSION = 14;

CAPICOM_OID_NAME_CONSTRAINTS_EXTENSION = 15;

CAPICOM_OID_CRL_DIST_POINTS_EXTENSION = 16;

CAPICOM_OID_CERT_POLICIES_EXTENSION = 17;

CAPICOM_OID_POLICY_MAPPINGS_EXTENSION = 18;

CAPICOM_OID_AUTHORITY_KEY_IDENTIFIER2_EXTENSION = 19;

CAPICOM_OID_POLICY_CONSTRAINTS_EXTENSION = 20;

CAPICOM_OID_ENHANCED_KEY_USAGE_EXTENSION = 21;

CAPICOM_OID_CERTIFICATE_TEMPLATE_EXTENSION = 22;

CAPICOM_OID_APPLICATION_CERT_POLICIES_EXTENSION = 23;

CAPICOM_OID_APPLICATION_POLICY_MAPPINGS_EXTENSION = 24;

CAPICOM_OID_APPLICATION_POLICY_CONSTRAINTS_EXTENSION = 25;

CAPICOM_OID_AUTHORITY_INFO_ACCESS_EXTENSION = 26;

CAPICOM_OID_SERVER_AUTH_EKU = 100;

CAPICOM_OID_CLIENT_AUTH_EKU = 101;

CAPICOM_OID_CODE_SIGNING_EKU = 102;

CAPICOM_OID_EMAIL_PROTECTION_EKU = 103;

CAPICOM_OID_IPSEC_END_SYSTEM_EKU = 104;

CAPICOM_OID_IPSEC_TUNNEL_EKU = 105;

CAPICOM_OID_IPSEC_USER_EKU = 106;

CAPICOM_OID_TIME_STAMPING_EKU = 107;

CAPICOM_OID_CTL_USAGE_SIGNING_EKU = 108;

CAPICOM_OID_TIME_STAMP_SIGNING_EKU = 109;

CAPICOM_OID_SERVER_GATED_CRYPTO_EKU = 110;

CAPICOM_OID_ENCRYPTING_FILE_SYSTEM_EKU = 111;

CAPICOM_OID_EFS_RECOVERY_EKU = 112;

CAPICOM_OID_WHQL_CRYPTO_EKU = 113;

CAPICOM_OID_NT5_CRYPTO_EKU = 114;

CAPICOM_OID_OEM_WHQL_CRYPTO_EKU = 115;

CAPICOM_OID_EMBEDED_NT_CRYPTO_EKU = 116;

CAPICOM_OID_ROOT_LIST_SIGNER_EKU = 117;

CAPICOM_OID_QUALIFIED_SUBORDINATION_EKU = 118;

CAPICOM_OID_KEY_RECOVERY_EKU = 119;

CAPICOM_OID_DIGITAL_RIGHTS_EKU = 120;

CAPICOM_OID_LICENSES_EKU = 121;

CAPICOM_OID_LICENSE_SERVER_EKU = 122;

CAPICOM_OID_SMART_CARD_LOGON_EKU = 123;

CAPICOM_OID_PKIX_POLICY_QUALIFIER_CPS = 124;

CAPICOM_OID_PKIX_POLICY_QUALIFIER_USERNOTICE = 125;

Enum CAPICOM_PROPID;

CAPICOM_PROPID_UNKNOWN = 0;

CAPICOM_PROPID_KEY_PROV_HANDLE = 1;

CAPICOM_PROPID_KEY_PROV_INFO = 2;

CAPICOM_PROPID_SHA1_HASH = 3;

CAPICOM_PROPID_HASH_PROP = 3;

CAPICOM_PROPID_MD5_HASH = 4;

CAPICOM_PROPID_KEY_CONTEXT = 5;

CAPICOM_PROPID_KEY_SPEC = 6;

CAPICOM_PROPID_IE30_RESERVED = 7;

CAPICOM_PROPID_PUBKEY_HASH_RESERVED = 8;

CAPICOM_PROPID_ENHKEY_USAGE = 9;

CAPICOM_PROPID_CTL_USAGE = 9;

CAPICOM_PROPID_NEXT_UPDATE_LOCATION = 10;

CAPICOM_PROPID_FRIENDLY_NAME = 11;

CAPICOM_PROPID_PVK_FILE = 12;

CAPICOM_PROPID_DESCRIPTION = 13;

CAPICOM_PROPID_ACCESS_STATE = 14;

CAPICOM_PROPID_SIGNATURE_HASH = 15;

CAPICOM_PROPID_SMART_CARD_DATA = 16;

CAPICOM_PROPID_EFS = 17;

CAPICOM_PROPID_FORTEZZA_DATA = 18;

CAPICOM_PROPID_ARCHIVED = 19;

CAPICOM_PROPID_KEY_IDENTIFIER = 20;

CAPICOM_PROPID_AUTO_ENROLL = 21;

CAPICOM_PROPID_PUBKEY_ALG_PARA = 22;

CAPICOM_PROPID_CROSS_CERT_DIST_POINTS = 23;

CAPICOM_PROPID_ISSUER_PUBLIC_KEY_MD5_HASH = 24;

CAPICOM_PROPID_SUBJECT_PUBLIC_KEY_MD5_HASH = 25;

CAPICOM_PROPID_ENROLLMENT = 26;

CAPICOM_PROPID_DATE_STAMP = 27;

CAPICOM_PROPID_ISSUER_SERIAL_NUMBER_MD5_HASH = 28;

CAPICOM_PROPID_SUBJECT_NAME_MD5_HASH = 29;

CAPICOM_PROPID_EXTENDED_ERROR_INFO = 30;

CAPICOM_PROPID_RENEWAL = 64;

CAPICOM_PROPID_ARCHIVED_KEY_HASH = 65;

CAPICOM_PROPID_FIRST_RESERVED = 66;

CAPICOM_PROPID_LAST_RESERVED = $7FFF;

CAPICOM_PROPID_FIRST_USER = $8000;

CAPICOM_PROPID_LAST_USER = $FFFF;

Enum CAPICOM_PROV_TYPE;

CAPICOM_PROV_RSA_FULL = 1;

CAPICOM_PROV_RSA_SIG = 2;

CAPICOM_PROV_DSS = 3;

CAPICOM_PROV_FORTEZZA = 4;

CAPICOM_PROV_MS_EXCHANGE = 5;

CAPICOM_PROV_SSL = 6;

CAPICOM_PROV_RSA_SCHANNEL = 12;

CAPICOM_PROV_DSS_DH = 13;

CAPICOM_PROV_EC_ECDSA_SIG = 14;

CAPICOM_PROV_EC_ECNRA_SIG = 15;

CAPICOM_PROV_EC_ECDSA_FULL = 16;

CAPICOM_PROV_EC_ECNRA_FULL = 17;

CAPICOM_PROV_DH_SCHANNEL = 18;

CAPICOM_PROV_SPYRUS_LYNKS = 20;

CAPICOM_PROV_RNG = 21;

CAPICOM_PROV_INTEL_SEC = 22;

CAPICOM_PROV_REPLACE_OWF = 23;

CAPICOM_PROV_RSA_AES = 24;

Enum CAPICOM_CERTIFICATE_SAVE_AS_TYPE;

CAPICOM_CERTIFICATE_SAVE_AS_PFX = 0;

CAPICOM_CERTIFICATE_SAVE_AS_CER = 1;

Enum CAPICOM_CERTIFICATES_SAVE_AS_TYPE;

CAPICOM_CERTIFICATES_SAVE_AS_SERIALIZED = 0;

CAPICOM_CERTIFICATES_SAVE_AS_PKCS7 = 1;

CAPICOM_CERTIFICATES_SAVE_AS_PFX = 2;

Enum CAPICOM_CERTIFICATE_INCLUDE_OPTION;

CAPICOM_CERTIFICATE_INCLUDE_CHAIN_EXCEPT_ROOT = 0;

CAPICOM_CERTIFICATE_INCLUDE_WHOLE_CHAIN = 1;

CAPICOM_CERTIFICATE_INCLUDE_END_ENTITY_ONLY = 2;

Enum CAPICOM_KEY_SPEC;

CAPICOM_KEY_SPEC_KEYEXCHANGE = 1;

CAPICOM_KEY_SPEC_SIGNATURE = 2;

Enum CAPICOM_KEY_LOCATION;

CAPICOM_CURRENT_USER_KEY = 0;

CAPICOM_LOCAL_MACHINE_KEY = 1;

Enum CAPICOM_KEY_STORAGE_FLAG;

CAPICOM_KEY_STORAGE_DEFAULT = 0;

CAPICOM_KEY_STORAGE_EXPORTABLE = 1;

CAPICOM_KEY_STORAGE_USER_PROTECTED = 2;

Enum CAPICOM_EXPORT_FLAG;

CAPICOM_EXPORT_DEFAULT = 0;

CAPICOM_EXPORT_IGNORE_PRIVATE_KEY_NOT_EXPORTABLE_ERROR = 1;

Enum CAPICOM_KEY_USAGE;

CAPICOM_DIGITAL_SIGNATURE_KEY_USAGE = 128;

CAPICOM_NON_REPUDIATION_KEY_USAGE = 64;

CAPICOM_KEY_ENCIPHERMENT_KEY_USAGE = 32;

CAPICOM_DATA_ENCIPHERMENT_KEY_USAGE = 16;

CAPICOM_KEY_AGREEMENT_KEY_USAGE = 8;

CAPICOM_KEY_CERT_SIGN_KEY_USAGE = 4;

CAPICOM_OFFLINE_CRL_SIGN_KEY_USAGE = 2;

CAPICOM_CRL_SIGN_KEY_USAGE = 2;

CAPICOM_ENCIPHER_ONLY_KEY_USAGE = 1;

CAPICOM_DECIPHER_ONLY_KEY_USAGE = $8000;

Enum CAPICOM_CERTIFICATE_FIND_TYPE;

CAPICOM_CERTIFICATE_FIND_SHA1_HASH = 0;

CAPICOM_CERTIFICATE_FIND_SUBJECT_NAME = 1;

CAPICOM_CERTIFICATE_FIND_ISSUER_NAME = 2;

CAPICOM_CERTIFICATE_FIND_ROOT_NAME = 3;

CAPICOM_CERTIFICATE_FIND_TEMPLATE_NAME = 4;

CAPICOM_CERTIFICATE_FIND_EXTENSION = 5;

CAPICOM_CERTIFICATE_FIND_EXTENDED_PROPERTY = 6;

CAPICOM_CERTIFICATE_FIND_APPLICATION_POLICY = 7;

CAPICOM_CERTIFICATE_FIND_CERTIFICATE_POLICY = 8;

CAPICOM_CERTIFICATE_FIND_TIME_VALID = 9;

CAPICOM_CERTIFICATE_FIND_TIME_NOT_YET_VALID = 10;

CAPICOM_CERTIFICATE_FIND_TIME_EXPIRED = 11;

CAPICOM_CERTIFICATE_FIND_KEY_USAGE = 12;

Enum CAPICOM_HASH_ALGORITHM;

CAPICOM_HASH_ALGORITHM_SHA1 = 0;

CAPICOM_HASH_ALGORITHM_MD2 = 1;

CAPICOM_HASH_ALGORITHM_MD4 = 2;

CAPICOM_HASH_ALGORITHM_MD5 = 3;

CAPICOM_HASH_ALGORITHM_SHA_256 = 4;

CAPICOM_HASH_ALGORITHM_SHA_384 = 5;

CAPICOM_HASH_ALGORITHM_SHA_512 = 6;

Module Constants;

CAPICOM_MAJOR_VERSION = 2;

CAPICOM_MINOR_VERSION = 1;

CAPICOM_RELEASE_NUMBER = 0;

CAPICOM_BUILD_NUMBER = 2;

CAPICOM_VERSION_INFO = CAPICOM v2.1;

CAPICOM_COPY_RIGHT = Copyright (c) Microsoft Corporation 1999-2006. All rights reserved.;

CAPICOM_MY_STORE = My;

CAPICOM_CA_STORE = Ca;

CAPICOM_ROOT_STORE = Root;

CAPICOM_OTHER_STORE = AddressBook;

CAPICOM_OID_SERVER_AUTH = 1.3.6.1.5.5.7.3.1;

CAPICOM_OID_CLIENT_AUTH = 1.3.6.1.5.5.7.3.2;

CAPICOM_OID_CODE_SIGNING = 1.3.6.1.5.5.7.3.3;

CAPICOM_OID_EMAIL_PROTECTION = 1.3.6.1.5.5.7.3.4;

CAPICOM_OID_IPSEC_END_SYSTEM = 1.3.6.1.5.5.7.3.5;

CAPICOM_OID_IPSEC_TUNNEL = 1.3.6.1.5.5.7.3.6;

CAPICOM_OID_IPSEC_USER = 1.3.6.1.5.5.7.3.7;

CAPICOM_OID_TIME_STAMPING = 1.3.6.1.5.5.7.3.8;

CAPICOM_OID_CTL_USAGE_SIGNING = 1.3.6.1.4.1.311.10.3.1;

CAPICOM_OID_TIME_STAMP_SIGNING = 1.3.6.1.4.1.311.10.3.2;

CAPICOM_OID_SERVER_GATED_CRYPTO = 1.3.6.1.4.1.311.10.3.3;

CAPICOM_OID_ENCRYPTING_FILE_SYSTEM = 1.3.6.1.4.1.311.10.3.4;

CAPICOM_OID_EFS_RECOVERY = 1.3.6.1.4.1.311.10.3.4.1;

CAPICOM_OID_WHQL_CRYPTO = 1.3.6.1.4.1.311.10.3.5;

CAPICOM_OID_NT5_CRYPTO = 1.3.6.1.4.1.311.10.3.6;

CAPICOM_OID_OEM_WHQL_CRYPTO = 1.3.6.1.4.1.311.10.3.7;

CAPICOM_OID_EMBEDED_NT_CRYPTO = 1.3.6.1.4.1.311.10.3.8;

CAPICOM_OID_ROOT_LIST_SIGNER = 1.3.6.1.4.1.311.10.3.9;

CAPICOM_OID_QUALIFIED_SUBORDINATION = 1.3.6.1.4.1.311.10.3.10;

CAPICOM_OID_KEY_RECOVERY = 1.3.6.1.4.1.311.10.3.11;

CAPICOM_OID_DIGITAL_RIGHTS = 1.3.6.1.4.1.311.10.5.1;

CAPICOM_OID_LICENSES = 1.3.6.1.4.1.311.10.6.1;

CAPICOM_OID_LICENSE_SERVER = 1.3.6.1.4.1.311.10.6.2;

CAPICOM_OID_SMART_CARD_LOGON = 1.3.6.1.4.1.311.20.2.2;

CAPICOM_SERVER_AUTH_OID = 1.3.6.1.5.5.7.3.1;

CAPICOM_CLIENT_AUTH_OID = 1.3.6.1.5.5.7.3.2;

CAPICOM_CODE_SIGNING_OID = 1.3.6.1.5.5.7.3.3;

CAPICOM_EMAIL_PROTECTION_OID = 1.3.6.1.5.5.7.3.4;

CAPICOM_IPSEC_END_SYSTEM_OID = 1.3.6.1.5.5.7.3.5;

CAPICOM_IPSEC_TUNNEL_OID = 1.3.6.1.5.5.7.3.6;

CAPICOM_IPSEC_USER_OID = 1.3.6.1.5.5.7.3.7;

CAPICOM_TIME_STAMPING_OID = 1.3.6.1.5.5.7.3.8;

CAPICOM_CTL_USAGE_SIGNING_OID = 1.3.6.1.4.1.311.10.3.1;

CAPICOM_TIME_STAMP_SIGNING_OID = 1.3.6.1.4.1.311.10.3.2;

CAPICOM_SERVER_GATED_CRYPTO_OID = 1.3.6.1.4.1.311.10.3.3;

CAPICOM_ENCRYPTING_FILE_SYSTEM_OID = 1.3.6.1.4.1.311.10.3.4;

CAPICOM_EFS_RECOVERY_OID = 1.3.6.1.4.1.311.10.3.4.1;

CAPICOM_WHQL_CRYPTO_OID = 1.3.6.1.4.1.311.10.3.5;

CAPICOM_NT5_CRYPTO_OID = 1.3.6.1.4.1.311.10.3.6;

CAPICOM_OEM_WHQL_CRYPTO_OID = 1.3.6.1.4.1.311.10.3.7;

CAPICOM_EMBEDED_NT_CRYPTO_OID = 1.3.6.1.4.1.311.10.3.8;

CAPICOM_ROOT_LIST_SIGNER_OID = 1.3.6.1.4.1.311.10.3.9;

CAPICOM_QUALIFIED_SUBORDINATION_OID = 1.3.6.1.4.1.311.10.3.10;

CAPICOM_KEY_RECOVERY_OID = 1.3.6.1.4.1.311.10.3.11;

CAPICOM_DIGITAL_RIGHTS_OID = 1.3.6.1.4.1.311.10.5.1;

CAPICOM_LICENSES_OID = 1.3.6.1.4.1.311.10.6.1;

CAPICOM_LICENSE_SERVER_OID = 1.3.6.1.4.1.311.10.6.2;

CAPICOM_SMART_CARD_LOGON_OID = 1.3.6.1.4.1.311.20.2.2;

CAPICOM_ANY_APPLICATION_POLICY_OID = 1.3.6.1.4.1.311.10.12.1;

CAPICOM_ANY_CERT_POLICY_OID = 2.5.29.32.0;

CAPICOM_AUTHORITY_KEY_IDENTIFIER_OID = 2.5.29.1;

CAPICOM_KEY_ATTRIBUTES_OID = 2.5.29.2;

CAPICOM_CERT_POLICIES_95_OID = 2.5.29.3;

CAPICOM_KEY_USAGE_RESTRICTION_OID = 2.5.29.4;

CAPICOM_LEGACY_POLICY_MAPPINGS_OID = 2.5.29.5;

CAPICOM_SUBJECT_ALT_NAME_OID = 2.5.29.7;

CAPICOM_ISSUER_ALT_NAME_OID = 2.5.29.8;

CAPICOM_BASIC_CONSTRAINTS_OID = 2.5.29.10;

CAPICOM_SUBJECT_KEY_IDENTIFIER_OID = 2.5.29.14;

CAPICOM_KEY_USAGE_OID = 2.5.29.15;

CAPICOM_PRIVATEKEY_USAGE_PERIOD_OID = 2.5.29.16;

CAPICOM_SUBJECT_ALT_NAME2_OID = 2.5.29.17;

CAPICOM_ISSUER_ALT_NAME2_OID = 2.5.29.18;

CAPICOM_BASIC_CONSTRAINTS2_OID = 2.5.29.19;

CAPICOM_NAME_CONSTRAINTS_OID = 2.5.29.30;

CAPICOM_CRL_DIST_POINTS_OID = 2.5.29.31;

CAPICOM_CERT_POLICIES_OID = 2.5.29.32;

CAPICOM_POLICY_MAPPINGS_OID = 2.5.29.33;

CAPICOM_AUTHORITY_KEY_IDENTIFIER2_OID = 2.5.29.35;

CAPICOM_POLICY_CONSTRAINTS_OID = 2.5.29.36;

CAPICOM_ENHANCED_KEY_USAGE_OID = 2.5.29.37;

CAPICOM_CERTIFICATE_TEMPLATE_OID = 1.3.6.1.4.1.311.21.7;

CAPICOM_APPLICATION_CERT_POLICIES_OID = 1.3.6.1.4.1.311.21.10;

CAPICOM_APPLICATION_POLICY_MAPPINGS_OID = 1.3.6.1.4.1.311.21.11;

CAPICOM_APPLICATION_POLICY_CONSTRAINTS_OID = 1.3.6.1.4.1.311.21.12;

CAPICOM_AUTHORITY_INFO_ACCESS_OID = 1.3.6.1.5.5.7.1.1;

CAPICOM_PKIX_POLICY_QUALIFIER_CPS_OID = 1.3.6.1.5.5.7.2.1;

CAPICOM_PKIX_POLICY_QUALIFIER_USERNOTICE_OID = 1.3.6.1.5.5.7.2.2;

CAPICOM_TRUST_IS_NOT_TIME_VALID = 1;

CAPICOM_TRUST_IS_NOT_TIME_NESTED = 2;

CAPICOM_TRUST_IS_REVOKED = 4;

CAPICOM_TRUST_IS_NOT_SIGNATURE_VALID = 8;

CAPICOM_TRUST_IS_NOT_VALID_FOR_USAGE = 16;

CAPICOM_TRUST_IS_UNTRUSTED_ROOT = 32;

CAPICOM_TRUST_REVOCATION_STATUS_UNKNOWN = 64;

CAPICOM_TRUST_IS_CYCLIC = 128;

CAPICOM_TRUST_INVALID_EXTENSION = $100;

CAPICOM_TRUST_INVALID_POLICY_CONSTRAINTS = $200;

CAPICOM_TRUST_INVALID_BASIC_CONSTRAINTS = $400;

CAPICOM_TRUST_INVALID_NAME_CONSTRAINTS = $800;

CAPICOM_TRUST_HAS_NOT_SUPPORTED_NAME_CONSTRAINT = $1000;

CAPICOM_TRUST_HAS_NOT_DEFINED_NAME_CONSTRAINT = $2000;

CAPICOM_TRUST_HAS_NOT_PERMITTED_NAME_CONSTRAINT = $4000;

CAPICOM_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT = $8000;

CAPICOM_TRUST_IS_OFFLINE_REVOCATION = $1000000;

CAPICOM_TRUST_NO_ISSUANCE_CHAIN_POLICY = $2000000;

CAPICOM_TRUST_IS_PARTIAL_CHAIN = $10000;

CAPICOM_TRUST_CTL_IS_NOT_TIME_VALID = $20000;

CAPICOM_TRUST_CTL_IS_NOT_SIGNATURE_VALID = $40000;

CAPICOM_TRUST_CTL_IS_NOT_VALID_FOR_USAGE = $80000;

CAPICOM_PROV_MS_DEF_PROV = Microsoft Base Cryptographic Provider v1.0;

CAPICOM_PROV_MS_ENHANCED_PROV = Microsoft Enhanced Cryptographic Provider v1.0;

CAPICOM_PROV_MS_STRONG_PROV = Microsoft Strong Cryptographic Provider;

CAPICOM_PROV_MS_DEF_RSA_SIG_PROV = Microsoft RSA Signature Cryptographic Provider;

CAPICOM_PROV_MS_DEF_RSA_SCHANNEL_PROV = Microsoft RSA SChannel Cryptographic Provider;

CAPICOM_PROV_MS_DEF_DSS_PROV = Microsoft Base DSS Cryptographic Provider;

CAPICOM_PROV_MS_DEF_DSS_DH_PROV = Microsoft Base DSS and Diffie-Hellman Cryptographic Provider;

CAPICOM_PROV_MS_ENH_DSS_DH_PROV = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider;

CAPICOM_PROV_MS_DEF_DH_SCHANNEL_PROV = Microsoft DH SChannel Cryptographic Provider;

CAPICOM_PROV_MS_SCARD_PROV = Microsoft Base Smart Card Crypto Provider;

CAPICOM_PROV_MS_ENH_RSA_AES_PROV = Microsoft Enhanced RSA and AES Cryptographic Provider (Prototype);