PKCS #7: Cryptographic Message Syntax



I’ve been using briansmith’s ring for my simple cryptography needs (to hash files), but as far as I’m able to tell, neither ring nor webpki support creating or verifying a PKCS #7 package.

I’d like to use PKCS #7 to create a chain of trust and authenticate some file, as well as read the Authenticode in Windows PE files (which are encoded in a PKCS #7 container).

What libraries would you use, or how else would I go about doing that?

Thanks so much.


We are also interested in this in SUPER, we still use the native openssl command though :confused:


A pull request just recently added some CMS support to rust-openssl: Should be easy to extend to the functionality you ned.