WvdS Doku - en:int:pqcrypt:szenarien:kurzreferenz

Create CSR

Anonymous (anonymous@undisclosed.example.com) — 2026-01-29T23:38:24+00:00

Create CSR Compact examples for Certificate Signing Requests. -> Details: CSR Scenarios ---------- Server CSR (TLS) using var ecdsa = ECDsa.Create(ECCurve.NamedCurves.nistP384); var dn = new X500DistinguishedNameBuilder(); dn.AddCommonName("api.example.com"); dn.AddOrganizationName("Example Corp"); var csr = new CertificateRequest(dn.Build(), ecdsa, HashAlgorithmName.SHA384); // SANs var sanBuilder = new SubjectAlternativeNameBuilder(); sanBuilder.AddDnsName("api.example.com"); sanBuilde…

Import/Export

Anonymous (anonymous@undisclosed.example.com) — 2026-01-29T23:39:24+00:00

Import/Export Compact examples for import/export. -> Details: Import/Export Scenarios ---------- PEM Export var cert = new X509Certificate2("certificate.pfx", "password"); // Certificate as PEM string certPem = cert.ExportCertificatePem(); File.WriteAllText("certificate.pem", certPem); // Private key as PEM (encrypted) using var key = cert.GetECDsaPrivateKey(); string keyPem = key.ExportEncryptedPkcs8PrivateKeyPem( "password"u8, new PbeParameters( PbeEncryptionAlgorithm.Aes256…

Building PKI Infrastructure

Anonymous (anonymous@undisclosed.example.com) — 2026-01-29T23:38:12+00:00

Building PKI Infrastructure Compact guide for building a PQ-capable PKI. -> Details: PKI Scenarios ---------- Hierarchy Root CA (Offline, ML-DSA-87) +-- Intermediate CA (Online, ML-DSA-65) +-- Server Certificates (Hybrid: ECDSA + ML-DSA) +-- Client Certificates (ML-DSA-65) +-- User Certificates (ML-DSA-65)

Key Management

Anonymous (anonymous@undisclosed.example.com) — 2026-01-29T23:39:14+00:00

Key Management Compact examples for key management. -> Details: Key Scenarios ---------- Generate Keys // ML-DSA (Signatures) using var mlDsa65 = MlDsaSigner.Create(MlDsaParameterSet.MlDsa65); using var mlDsa87 = MlDsaSigner.Create(MlDsaParameterSet.MlDsa87); // ML-KEM (Key Exchange) using var mlKem768 = MlKem.Create(MlKemParameterSet.MlKem768); using var mlKem1024 = MlKem.Create(MlKemParameterSet.MlKem1024); // Classical (Hybrid) using var ecdsa = ECDsa.Create(ECCurve.NamedCurves.nistP38…

Digital Signatures

Anonymous (anonymous@undisclosed.example.com) — 2026-01-29T23:38:46+00:00

Digital Signatures Compact examples for signatures. -> Details: Signature Scenarios ---------- RSA Hybrid Signature using var rsa = RSA.Create(4096); byte[] data = Encoding.UTF8.GetBytes("Data to sign"); // Hybrid signature (RSA + ML-DSA) byte[] signature = rsa.SignData(data, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1, CryptoMode.Hybrid); // Verify bool valid = rsa.VerifyData(data, signature, HashAlgorithmName.SHA256, RSASignaturePadding.Pkcs1, CryptoMode.Hybrid);

Quick Reference

Anonymous (anonymous@undisclosed.example.com) — 2026-01-29T23:38:00+00:00

Quick Reference Compact code examples for quick start. For detailed explanations, see the linked scenarios. ---------- PKI & Certificates Example Description Details PKI Infrastructure Root CA, Intermediate CA, hierarchy -> PKI Scenarios Create CSR Server, client, code signing

Validation

Anonymous (anonymous@undisclosed.example.com) — 2026-01-29T23:38:36+00:00

Validation Compact examples for certificate validation. -> Details: Validation Scenarios ---------- Single Certificate var cert = new X509Certificate2("certificate.crt"); // Time validity bool timeValid = DateTime.UtcNow >= cert.NotBefore && DateTime.UtcNow <= cert.NotAfter; // Check PQ signature bool hasPq = cert.HasPqSignature(); if (hasPq) { bool pqValid = cert.VerifyPqSignature(); }

Encryption

Anonymous (anonymous@undisclosed.example.com) — 2026-01-29T23:39:00+00:00

Encryption Compact examples for encryption. -> Details: Encryption Scenarios ---------- ML-KEM Key Encapsulation // Receiver: Generate key pair using var mlKem = MlKem.Create(MlKemParameterSet.MlKem768); byte[] publicKey = mlKem.ExportPublicKey(); // Sender: Encapsulate shared secret var encap = MlKem.Encapsulate(publicKey); byte[] ciphertext = encap.Ciphertext; byte[] senderSecret = encap.SharedSecret; // Receiver: Decapsulate shared secret byte[] receiverSecret = mlKem.Decapsulate(ciphe…

Certificate Management

Anonymous (anonymous@undisclosed.example.com) — 2026-01-29T23:39:38+00:00

Certificate Management Compact examples for certificate management. -> Details: Management Scenarios ---------- Renew Certificate (Same Key) var caCert = new X509Certificate2("intermediate-ca.pfx", "password"); var oldCert = new X509Certificate2("server.pfx", "password"); var privateKey = oldCert.GetECDsaPrivateKey(); var request = new CertificateRequest( oldCert.SubjectName, (ECDsa)privateKey, HashAlgorithmName.SHA384); // Copy extensions (except SKI) foreach (var ext in oldCert.Ext…