PKCS12_PBES2_EXPORT_PARAMS structure (wincrypt.h)

Passed to the PFXExportCertStoreEx function as pvPara when the PKCS12_EXPORT_PBES2_PARAMS flag is set for dwFlags to provide information about the encryption algorithm to use.

Syntax

typedef struct _PKCS12_PBES2_EXPORT_PARAMS {
  DWORD  dwSize;
  PVOID  hNcryptDescriptor;
  LPWSTR pwszPbes2Alg;
} PKCS12_PBES2_EXPORT_PARAMS, *PPKCS12_PBES2_EXPORT_PARAMS;

Members

dwSize

The size of the structure, in bytes.

hNcryptDescriptor

If the PKCS12_PROTECT_TO_DOMAIN_SIDS flag is set for dwFlags when calling the PFXExportCertStoreEx function, you can set this field to an NCRYPT_DESCRIPTOR_HANDLE value. See the pvPara description in the PFXExportCertStoreEx for more information.

pwszPbes2Alg

The designation of the password-based encryption algorithm to use.

Value Meaning
PKCS12_PBES2_ALG_AES256_SHA256
AES256-SHA256
AES256 will be used for key/certificate encryption, and SHA256 will be used for KDF2, and MacData hashing.

Requirements

Requirement Value
Minimum supported client Windows 10 1709
Minimum supported server Windows Server 2019
Header wincrypt.h