Produces the signature value of a document signature from a digest: the extension point signing goes through, so that the private key can stay in a hardware security module, a smart card or a remote signing service.
public interface IPdfSigner
ISO 32000-2 §12.8.1 and §12.8.3.3; RFC 5652 §5.4 and §5.5. The document computes the byte range digest itself, builds the CMS signed attributes (content type, message digest and signing certificate), and asks the signer to sign the digest of their DER encoding, the value RFC 5652 §5.4 says the signature is computed over. The signer never sees the document. It returns the raw signature value, whose algorithm follows the certificate's key:
The digest algorithm is SHA-256, SHA-384, SHA-512, SHA3-256, SHA3-384 or SHA3-512 (ISO 32000-2 Table 260; ISO/TS 32001 §5.1.4).
The document then builds the CMS SignedData around the value with Certificate and
CertificateChain.
PdfCertificateSigner is the managed default, over a certificate whose private key the platform holds. A signer is asked once per signature; a document may be signed from any thread but not from several at once (signing is a mutation).
kind:method, kind:property, kind:ctor. Press Esc to clear.CertificateGets the signer's certificate, whose public key verifies the signature. Its private key is not needed.CertificateChainGets the other certificates of the signer's chain to embed in the signature, from the issuer of Certificate upward; empty to embed only Certificate.RsaSignaturePaddingGets the signature scheme the signer uses with an RSA key: or . Ignored for an ECDSA key.SignDigest(ReadOnlySpan<Byte>, HashAlgorithmName)Signs digest, the digest of the signed attributes, with the signer's private key.SignDigestAsync(ReadOnlyMemory<Byte>, HashAlgorithmName, CancellationToken)Signs digest asynchronously, for a signer that waits on a device or a remote service.