Re: 0x80090006 (Invalid Signature. )

Laszlo Elteto <[email protected]> Thu, 13 Oct 2005 12:32:40 -0400
Newsgroups gmane.comp.encryption.cryptoapi
Message-ID <[email protected]>
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--===============1887576516==
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_001_01C5D013.B91E55FA"

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C5D013.B91E55FA
Content-Type: text/plain;
	charset="iso-8859-1"

The issue is that Microsoft changed how it allows testing CSPs. For quite a
long time the only supported way to test CSP not signed by Microsoft is to
load a KERNEL DEBUGGER on the test computer. (You don't have to use it, it's
just that it has to be loaded. You are free to use your favorite debugger -
or no debugger at all.)
 
Now there is another way to allow loading of CSPs and that's PATCHING
advapi32.dll - but that is version specific. In the past I've provided many
patching instructions for various Win2k and XP advapi32.dll versions. You
can try to visit the Microsoft Platform SDK/Security support forum at
http://msdn.microsoft.com/newsgroups/default.aspx?dg=microsoft.public.platfo
rmsdk.security
<http://msdn.microsoft.com/newsgroups/default.aspx?dg=microsoft.public.platf
ormsdk.security>  and search for "advapi32" - you will find instructions
what bytes to patch and how to replace the system dll.
 
Laszlo Elteto
SafeNet, Inc.

-----Original Message-----
From: [email protected]
[mailto:[email protected]]On Behalf Of Chris Bender
Sent: Thursday, October 13, 2005 9:13 AM
To: [email protected]
Subject: [CryptoAPI] 0x80090006 (Invalid Signature. )




Hey everyone, 

Im new to the list, and I have a feeling this may be a common problem that I
am having some trouble diagnosing with google, etc.

I have created a csp dll that currently just forwards all calls to the
default provider on my machine. 

I registered the csp in my registry, as it appears in the list of providers
when I run csptestsuite.exe 

I sign it by 
C:\cspdk>cspSign.exe c C:\p4_sandbox\dev\cbender\MyCSP.dll 

Then it verifies properly with 
C:\cspdk>cspSign.exe d C:\p4_sandbox\dev\cbender\MyCSP.dll 


Now, when I run (ie test CryptAquireContext) 
C:\cspdk\testSuite\x86>csptestsuite.exe  -c "Benders Test Cryptographic
Service Provider" -f 0 

I get 
[  API]    CryptAcquireContext 
[ INFO]    Returned: False 
[ INFO]    Error type: API failed unexpectedly 
[ INFO]    Known error: No 
[ INFO]    Actual error code: 0x80090006 (Invalid Signature. ) 



I am running WinXP and when I go to Internet Explorer->Help->About my cipher
strength is 128, so I am pretty sure I have the newest crypto dlls
installed.



Has anyone been able to solve this problem? 


Thanks 
Chris 



  _____  

This transmission (including any attachments) may contain confidential
information, privileged material (including material protected by the
solicitor-client or other applicable privileges), or constitute non-public
information. Any use of this information by anyone other than the intended
recipient is prohibited. If you have received this transmission in error,
please immediately reply to the sender and delete this information from your
system. Use, dissemination, distribution, or reproduction of this
transmission by unintended recipients is not authorized and may be unlawful.




The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it.
------_=_NextPart_001_01C5D013.B91E55FA
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE=20HTML=20PUBLIC=20"-//W3C//DTD=20HTML=204.0=20Transitional//EN">=

<HTML><HEAD>
<META=20HTTP-EQUIV=3D"Content-Type"=20CONTENT=3D"text/html;=20charset=3Dis=
o-8859-1">
<TITLE>0x80090006=20(Invalid=20Signature.=20)</TITLE>

<META=20content=3D"MSHTML=206.00.2800.1522"=20name=3DGENERATOR></HEAD>
<BODY>
<DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00=
00ff=20size=3D2>The=20
issue=20is=20that=20Microsoft=20changed=20how=20it=20allows=20testing=20CS=
Ps.=20For=20quite=20a=20long=20
time=20the=20only=20supported=20way=20to=20test=20CSP=20not=20signed=20by=20=
Microsoft=20is=20to=20load=20a=20
KERNEL=20DEBUGGER=20on=20the=20test=20computer.=20(You=20don't=20have=20to=
=20use=20it,=20it's=20just=20that=20
it=20has=20to=20be=20loaded.=20You=20are=20free=20to=20use=20your=20favori=
te=20debugger=20-=20or=20no=20debugger=20
at=20all.)</FONT></SPAN></DIV>
<DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00=
00ff=20
size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00=
00ff=20size=3D2>Now=20
there=20is=20another=20way=20to=20allow=20loading=20of=20CSPs=20and=20that=
's=20PATCHING=20advapi32.dll=20-=20
but=20that=20is=20version=20specific.=20In=20the=20past=20I've=20provided=20=
many=20patching=20
instructions=20for=20various=20Win2k=20and=20XP=20advapi32.dll=20versions.=
=20You=20can=20try=20to=20
visit=20the=20Microsoft=20Platform=20SDK/Security=20support=20forum=20at=20=
<A=20
href=3D"http://msdn.microsoft.com/newsgroups/default.aspx?dg=3Dmicrosoft.p=
ublic.platformsdk.security">http://msdn.microsoft.com/newsgroups/default.a=
spx?dg=3Dmicrosoft.public.platformsdk.security</A>&nbsp;and=20
search=20for=20"advapi32"=20-=20you=20will=20find=20instructions=20what=20=
bytes=20to=20patch=20and=20how=20
to=20replace=20the=20system=20dll.</FONT></SPAN></DIV>
<DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00=
00ff=20
size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00=
00ff=20size=3D2>Laszlo=20
Elteto</FONT></SPAN></DIV>
<DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00=
00ff=20
size=3D2>SafeNet,=20Inc.</FONT></SPAN></DIV>
<BLOCKQUOTE>
=20=20<DIV=20class=3DOutlookMessageHeader=20dir=3Dltr=20align=3Dleft><FONT=
=20face=3DTahoma=20
=20=20size=3D2>-----Original=20Message-----<BR><B>From:</B>=20
[email protected]=20
=20=20[mailto:[email protected]]<B>On=20Behalf=20Of=20</B>C=
hris=20
=20=20Bender<BR><B>Sent:</B>=20Thursday,=20October=2013,=202005=209:13=20A=
M<BR><B>To:</B>=20
[email protected]<BR><B>Subject:</B>=20[CryptoAPI]=200x800900=
06=20(Invalid=20
=20=20Signature.=20)<BR><BR></FONT></DIV><!--=20Converted=20from=20text/rt=
f=20format=20--><BR>
=20=20<P><FONT=20face=3DArial=20size=3D2>Hey=20everyone,</FONT>=20</P>
=20=20<P><FONT=20face=3DArial=20size=3D2>Im=20new=20to=20the=20list,=20and=
=20I=20have=20a=20feeling=20this=20may=20
=20=20be=20a=20common=20problem=20that=20I=20am=20having=20some=20trouble=20=
diagnosing=20with=20google,=20
=20=20etc.</FONT></P>
=20=20<P><FONT=20face=3DArial=20size=3D2>I=20have=20created=20a=20csp=20dl=
l=20that=20currently=20just=20
=20=20forwards=20all=20calls=20to=20the=20default=20provider=20on=20my=20m=
achine.</FONT>=20</P>
=20=20<P><FONT=20face=3DArial=20size=3D2>I=20registered=20the=20csp=20in=20=
my=20registry,=20as=20it=20appears=20
=20=20in=20the=20list=20of=20providers=20when=20I=20run=20csptestsuite.exe=
</FONT>=20</P>
=20=20<P><FONT=20face=3DArial=20size=3D2>I=20sign=20it=20by=20</FONT><BR><=
FONT=20face=3DArial=20
=20=20size=3D2>C:\cspdk&gt;cspSign.exe=20c=20C:\p4_sandbox\dev\cbender\MyC=
SP.dll</FONT>=20
=20=20</P>
=20=20<P><FONT=20face=3DArial=20size=3D2>Then=20it=20verifies=20properly=20=
with</FONT>=20<BR><FONT=20
=20=20face=3DArial=20size=3D2>C:\cspdk&gt;cspSign.exe=20d=20
=20=20C:\p4_sandbox\dev\cbender\MyCSP.dll</FONT>=20</P><BR>
=20=20<P><FONT=20face=3DArial=20size=3D2>Now,=20when=20I=20run=20(ie=20tes=
t=20CryptAquireContext)</FONT>=20
=20=20<BR><FONT=20face=3DArial=20size=3D2>C:\cspdk\testSuite\x86&gt;csptes=
tsuite.exe&nbsp;=20
=20=20-c=20"Benders=20Test=20Cryptographic=20Service=20Provider"=20-f=200<=
/FONT>=20</P>
=20=20<P><FONT=20face=3DArial=20size=3D2>I=20get=20</FONT><BR><FONT=20face=
=3DArial=20size=3D2>[&nbsp;=20
=20=20API]&nbsp;&nbsp;&nbsp;=20CryptAcquireContext</FONT>=20<BR><FONT=20fa=
ce=3DArial=20
=20=20size=3D2>[=20INFO]&nbsp;&nbsp;&nbsp;=20Returned:=20False</FONT>=20<B=
R><FONT=20face=3DArial=20
=20=20size=3D2>[=20INFO]&nbsp;&nbsp;&nbsp;=20Error=20type:=20API=20failed=20=
unexpectedly</FONT>=20
=20=20<BR><FONT=20face=3DArial=20size=3D2>[=20INFO]&nbsp;&nbsp;&nbsp;=20Kn=
own=20error:=20No</FONT>=20
=20=20<BR><FONT=20face=3DArial=20size=3D2>[=20INFO]&nbsp;&nbsp;&nbsp;=20Ac=
tual=20error=20code:=20
=20=200x80090006=20(Invalid=20Signature.=20)</FONT>=20</P><BR><BR>
=20=20<P><FONT=20face=3DArial=20size=3D2>I=20am=20running=20WinXP=20and=20=
when=20I=20go=20to=20Internet=20
=20=20Explorer-&gt;Help-&gt;About=20my=20cipher=20strength=20is=20128,=20s=
o=20I=20am=20pretty=20sure=20I=20
=20=20have=20the=20newest=20crypto=20dlls=20installed.</FONT></P><BR><BR>
=20=20<P><FONT=20face=3DArial=20size=3D2>Has=20anyone=20been=20able=20to=20=
solve=20this=20problem?</FONT>=20
=20=20</P><BR>
=20=20<P><FONT=20face=3DArial=20size=3D2>Thanks</FONT>=20<BR><FONT=20face=3D=
Arial=20
=20=20size=3D2>Chris</FONT>=20</P>
=20=20<P>
=20=20<HR>
=20=20This=20transmission=20(including=20any=20attachments)=20may=20contai=
n=20confidential=20
=20=20information,=20privileged=20material=20(including=20material=20prote=
cted=20by=20the=20
=20=20solicitor-client=20or=20other=20applicable=20privileges),=20or=20con=
stitute=20non-public=20
=20=20information.=20Any=20use=20of=20this=20information=20by=20anyone=20o=
ther=20than=20the=20intended=20
=20=20recipient=20is=20prohibited.=20If=20you=20have=20received=20this=20t=
ransmission=20in=20error,=20
=20=20please=20immediately=20reply=20to=20the=20sender=20and=20delete=20th=
is=20information=20from=20your=20
=20=20system.=20Use,=20dissemination,=20distribution,=20or=20reproduction=20=
of=20this=20transmission=20
=20=20by=20unintended=20recipients=20is=20not=20authorized=20and=20may=20b=
e=20unlawful.=20
</BLOCKQUOTE>
<BR>
The=20information=20contained=20in=20this=20electronic=20mail=20transmissi=
on=20may=20be=20privileged=20and=20confidential,=20and=20therefore,=20prot=
ected=20from=20disclosure.=20If=20you=20have=20received=20this=20communica=
tion=20in=20error,=20please=20notify=20us=20immediately=20by=20replying=20=
to=20this=20message=20and=20deleting=20it=20from=20your=20computer=20witho=
ut=20copying=20or=20disclosing=20it.<BR>
</BODY></HTML>

------_=_NextPart_001_01C5D013.B91E55FA--

--===============1887576516==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
CryptoAPI mailing list
[email protected]
http://cypherpunks.to/mailman/listinfo/cryptoapi

--===============1887576516==--