function TCryptoFile.DecryptPKCS(iEncryptedFileStream:TMemoryStream; iCertIDStr:string; oFileStream:TMemoryStream):integer;
var vFSCertID:TFSCertificateID;
vDecryptInfo:CRYPT_DECRYPT_MESSAGE_PARA;
pFSCertContext:PPCCERT_CONTEXT;
hBufCertStore:HCERTSTORE;
vDecryptedFileSize:DWORD;
begin
//Заполняем структуру vDecryptInfo
hBufCertStore:=CertOpenSystemStore(0, 'MY');
try
FillChar(vDecryptInfo, SizeOf(CRYPT_DECRYPT_MESSAGE_PARA), #0);
vDecryptInfo.cbSize:=SizeOf(CRYPT_DECRYPT_MESSAGE_PARA);
vDecryptInfo.dwMsgAndCertEncodingType:=cCertEncodingType;
vDecryptInfo.cCertStore:=1;
vDecryptInfo.rghCertStore:=@hBufCertStore;
CryptDecryptMessage(@vDecryptInfo, iEncryptedFileStream.Memory, iEncryptedFileStream.Size, nil, @vDecryptedFileSize, nil);
oFileStream.Size:=vDecryptedFileSize;
pFSCertContext:=nil;
if CryptDecryptMessage(@vDecryptInfo, iEncryptedFileStream.Memory, iEncryptedFileStream.Size, oFileStream.Memory, @vDecryptedFileSize, pFSCertContext) then
Result:=0
else
Result:=1;
//API гдето косячит 2 раза разный размер данных выбирает поэтому будем править топором
oFileStream.Size:=vDecryptedFileSize;
vFSCertID:=TFSCertificateID.Create;
try
// vFSCertID.FillByContext(pFSCertContext^);
// if (vFSCertID.Encode64ID <> iCertIDStr) then
// Result:=3;
except
vFSCertID.Free;
raise;
end;
vFSCertID.Free;
except
CertCloseStore(hBufCertStore, 0);
raise;
end;
CertCloseStore(hBufCertStore, 0);
end;