Develop Reference

Getting private key from ECC certificate

How can I get the private key from a certificate I imported with a .p12 file (contains private key too)? I am using .net
I have tried loading the certificate from the store and use .PrivateKey that is only for RSA and DSA because I get an error.
My certificate is ECC which I cannot find much information about. I tried using
certificate.GetECDsaPrivateKey()
but it returns null? What can I do to get the private key from the cert store? I need this private key to form a shared secret with a public key I have. Any help is appreciated. Thanks
edit: i converted the p12 into a .pem and can see that there is a private key in there

Access to a X509 certificate with private key

I was just wondering about the following scenario: I have a certificate containing a private key in my Windows certificate store and would like to use it for signing stuff. Is it possible to let Windows do this, so that I do not need to make the private key accessible (like in TPM)? In case I really must make the private key accessible, how can I protect it from being accessed by other (potentially malicious) applications? Having a separate user account?
Thanks

Write P7M file Cades compliant

I'm working with my smartcard and x509 cert through Net.Pkcs11.dll component.
I'm able to sign a file, but I don't know how can I create a P7M structure.
I've already seen many examples (BouncyCastle and so on) but all of theme use digital certificate with private key, while my private key is protected by smartcard.
Can you help me?

Store Asymmetric Key Container In Load Balanced Cloud Environment

I've been tasked with signing some data with the C# RSACryptoServiceProvider.SignData() Method. In order to generate the public and private key i've used the RSACryptoServiceProvider and passed a keycontainername in order to store the keys safely.
When i run the MSDN example to generate a set of public/private keys on my machine with the fixed keycontainername, the expected public / private keys are generated every time the same.
This will work fine on a single server environment, however, we are operating on an elastic environment where the servers are load balanced. If i encrypt the data with a private key on any one single machine and store this data in through the RSACryptoServiceProvider the data will only exist at the machine level. Each machine will use a different key to sign the data and the user of the public key won't be able to verify the signature.
Is there any way i can store the key safely in a distributed environment?
Thanks

There are two that come to mind.
The first is use X509 certificates that contain the private key. You can use the X509Certificate2 class to get an RSACryptoServiceProvider instance that has the private key. The certificate and private key itself would be kept in the Windows certificate store. You can then limit access to the private key through the certificate store to certain accounts. You would then just install the certificate on each machine / AMI that needs it.
Your other option is to use an Hardware Security Module. AWS has a service called CloudHSM that allows you to use a network HSM inside of a VPC (I don't know how well that will work with Elastic Bean Stalk). The HSM vendor, SafeNet IIRC, allows installing a CSP that points to the HSM. You'd then give the RSACryptoServiceProvider a instance of CspParameters that accepts the container and CSP name.
The HSM solution is the most secure, albeit more complex and expensive.

Importing all certificates contained in a .p12 file

I have a .p12 file for my ASP.NET application to connect to a web service via HTTPS.
I am trying to import the .p12 file into the Local Machine/My store. The .p12 file contains more than one certificate. One contains the private key and the other is the CA certificate to complete the chain.
Currently I am using the `System.Security.Cryptography.X509Certificates.X509Certificate2 object's Import method to import this file into the store. Today I noticed that the CA certificate is not getting imported, only the main certificate containing the private key is getting imported using this method. After further review of MSDN I have found the following rule regarding the Import method:
Note that a PFX/PKCS12 certificate can contain more than one certificate. In that case, the first certificate associated with a private key is used or, if no private key is found, the first certificate is used.
Can anyone suggest to me another method for importing the .p12 file programmatically that will actually import all certificates in the file? I am using PowerShell to perform this function.

Instead of using the X509Certificate2.Import method, use the X509Certificate2Collection.Import method. It will give you all certificates from the .p12 file.
You can then add each certificate to its appropriate store.