Verifying a Signature

To verify a signature, create a hash object using CryptCreateHash. This hash object accumulates the data to be verified. The data is then added to the hash object with the CryptHashData function.

After the last block of data is added to the hash, use CryptVerifySignature to verify the signature. The address of the signature data, a handle to the hash object, and the handle of the public keys are passed to CryptVerifySignature.

After the signature has been verified (or has failed the verification), destroy the hash object using the CryptDestroyHash function.