Hi Daniel,
That checksum is calculated in such a way (ignoring certain fields of
the PE file format, plus the embedded MAC) that you should be able to
simply sign the released DLL without affecting the checksum.

If that isn't working correctly, please send us details of exactly what
you are doing.

I'm also not clear on why you would need to disable the checksum logic
when recompiling, since core-mac is automatically run to install the
calculated checksum.

In any case, please be aware that the FIPS certification is only for the
DLL with the original checksum as released.

Regards,
Pete Dettman


On 8/9/20 11:07 pm, Daniel Jeannotte wrote:
> I am trying to use the FIPS certified version of the BC assembly
> (v1.0.1) but integrating it into my product code is challenging because
> it is not strong named.  
> 
> As a short term fix I recompiled the source and signed it with the same
> cert used for the rest of my product code, but in doing so I had to
> disable the checksum logic in the BC library.
> 
> Does anyone know if there's a strong named version available somewhere?
> 


Reply via email to