Extension Methods per CertificateRevocationListBuilder con supporto post-quantum.

namespace WvdS.System.Security.Cryptography.X509Certificates;
 
public static class CertificateRevocationListExtensions

Modalita Hybrid (raccomandata):

// Caricare certificato CA
var caCert = new X509Certificate2("ca.pfx", "password");
 
// Creare CRL
var builder = new CertificateRevocationListBuilder();
builder.AddEntry(revokedCertificate.SerialNumberBytes.ToArray());
 
// Costruire CRL con firma ibrida
byte[] crlData = builder.Build(
    caCert,
    crlNumber: BigInteger.One,
    nextUpdate: DateTimeOffset.UtcNow.AddDays(7),
    HashAlgorithmName.SHA256,
    CryptoMode.Hybrid);

byte[] crlData = File.ReadAllBytes("ca.crl");
var caCert = new X509Certificate2("ca.cer");
 
bool isValid = CertificateRevocationListExtensions.VerifySignature(
    crlData,
    caCert,
    CryptoMode.Hybrid);

• RFC 5280¹⁾ - Profilo CRL PKI X.509
• NIST FIPS 204²⁾ - ML-DSA

• RevocationExtensions
• X509ChainExtensions

Wolfgang van der Stille @ EMSR DATA d.o.o. - Post-Quantum Cryptography Professional