Microsoft® Windows® 2000 Security Handbook

Message Support API

The last API that I discuss is the message support API. It provides the developers with only two functions, MakeSignature() and VerifySignature(), in the version of SSPI available in Windows NT 4.0, plus two more functions EncryptMessage() and DecryptMessage(), in Windows 2000. That difference is a result of the export regulations in force when Windows NT was released.

MakeSignature

Listing 16.12 demonstrates the use of function MakeSignature() to digitally sign the message. The size of signature, the algorithm used, and other parameters of the signature depend on the security package you are using. I recommend you query the maximum length of the signature by calling QueryContextAttributes() before making a message signature. ...