Data Signing Service
IDataSigningService
in assembly SanteDB.Core.Api version 2.1.151.0
Summary
Contract for services which can sign data using configured digital signature algorithms
Description
Implementers of this service contract are responsible for computing and validating digital signatures against arbitrary data streams. Implementers of this service are responsible for maintaining (or acquiring) a master list of keys which can be used for data signing, and validating digital signatures.
Operations
Operation | Response/Return | Input/Parameter | Description |
---|---|---|---|
GetKeys | IEnumerable<String> | none | TODO |
GetSignatureAlgorithm | String | String keyId | Get the siganture algorithm this service would use to sign w/the specified key |
AddSigningKey | void | String keyId Byte[] keyData String signatureAlgorithm | Register a key with the provider |
SignData | Byte[] | Byte[] data String keyId | Signs the specified data using the service's configured signing key |
Verify | Boolean | Byte[] data Byte[] signature String keyId | Verifies the digital signature of the data |
Implementations
DefaultDataSigningService - (SanteDB.Server.Core)
Default data signature service
Description
This digital signature service uses the keys configured in the SecurityConfigurationSection to sign data based on the type of signature algorithm in the SecurityConfigurationSection. Supported signature algorithms are:
HMAC256 (HMAC + SHA256) using shared secrets
RS256 (RSA+SHA256) using X.509 certificates (generation of a signature requires private key)
RS512 (RSA+SHA512)
Service Registration
Example Implementation
References
Last updated