Skip to content

Commit 00e1d85

Browse files
Merge pull request MicrosoftDocs#1846 from Xelu86/update_cryptosettings
Updated remarks for schannel RSA
2 parents ff7f7ef + 358ee72 commit 00e1d85

File tree

1 file changed

+12
-5
lines changed

1 file changed

+12
-5
lines changed

sdk-api-src/content/schannel/ns-schannel-crypto_settings.md

Lines changed: 12 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
UID: NS:schannel._CRYPTO_SETTINGS
33
title: CRYPTO_SETTINGS
4-
ms.date: 11/4/2019
4+
ms.date: 06/25/2024
55
targetos: Windows
66
description: Indicates disabled cryptographic settings.
77
tech.root: security
@@ -66,19 +66,19 @@ Cryptographic settings are ignored if the specified algorithm is not used by a s
6666

6767
### -field cChainingModes
6868

69-
The count of entries in the rgstrChainingModes array.
69+
The count of entries in the rgstrChainingModes array.
7070

7171
Set to 0 if strCngAlgId does not have a chaining mode (*e.g. BCRYPT_SHA384_ALGORITHM*). It is an error to specify more than SCH_CRED_MAX_SUPPORTED_CHAINING_MODES.
7272

7373
### -field rgstrChainingModes
7474

75-
An array of <a href="/windows/win32/seccng/cng-property-identifiers">CNG chaining mode identifiers</a>.
75+
An array of <a href="/windows/win32/seccng/cng-property-identifiers">CNG chaining mode identifiers</a>.
7676

7777
Set to NULL if strCngAlgId does not have a chaining mode (*e.g. BCRYPT_SHA384_ALGORITHM*).
7878

7979
### -field dwMinBitLength
8080

81-
Minimum bit length for the specified CNG algorithm.
81+
Minimum bit length for the specified CNG algorithm.
8282

8383
If 0, schannel uses system defaults. Set to 0 if the CNG algorithm implies bit length (*e.g. BCRYPT_ECDH_P521_ALGORITHM*).
8484

@@ -90,10 +90,17 @@ If 0, schannel uses system defaults. Set to 0 if the CNG algorithm implies bit l
9090

9191
## -remarks
9292

93+
The following constant distinguishes between the different RSA padding modes and can be specified in the `strCngAlgId` field. Either of these modes can be provided instead of the <a href="/windows/win32/seccng/cng-algorithm-identifiers">CNG algorithm identifier</a>.
94+
95+
```cpp
96+
#define SCHANNEL_RSA_PSS_PADDING_ALGORITHM L"SCH_RSA_PSS_PAD"
97+
#define SCHANNEL_RSA_PKCS_PADDING_ALGORITHM L"SCH_RSA_PKCS_PAD"
98+
```
99+
93100
## -see-also
94101
95102
[SCH_CREDENTIALS](ns-schannel-sch_credentials.md)
96103
97104
[TLS_PARAMETERS](ns-schannel-tls_parameters.md)
98105
99-
[eTlsAlgorithmUsage](ne-schannel-etlsalgorithmusage.md)
106+
[eTlsAlgorithmUsage](ne-schannel-etlsalgorithmusage.md)

0 commit comments

Comments
 (0)