Adobe acrobat 7.0.5 sdk User Manual

Page of 122
95
Providing Document Security
Security Handlers
11
code uses the DigSig API for digital signature operations, but provides many additional 
benefits. Developers are encouraged to use the PubSec HFT rather then DigSig HFT. 
PubSec provides functions to:
Count and close encrypted documents.
Validate a specific signature field.
Access and create digests for data buffers.
Import and export certificate data, and manage the certificates in the Acrobat Address 
Book (AAB).
Manage signature appearances (DSAP files).
Register and unregister handlers. Handlers can register as PubSec handlers to provide 
the following cryptographic services:
– Perform private-key signing and signature validation
– Act as a cryptographic source for decrypting using private keys
– Act as a directory source for certificate-based identity authentication
Handlers can call back into the PubSec HFT for various services. Most calls to PubSec pass 
an opaque state object called a PSEngine. You specify a default engine upon registering the 
handler, and the default engine can make use of the security user interface dialog boxes 
provided by PubSec and DigSig. 
For more information, see the Acrobat and PDF Library API Overview and the Acrobat and 
PDF Library API Reference
.
Security Handlers and Acrobat JavaScript
SecurityHandler
 objects are used to access security handler capabilities such as 
signatures, encryption and directories. Different security handlers will have different 
properties and methods. Individual 
SecurityHandler
 objects may or may not 
implement these properties and methods. 
The JavaScript interface for Adobe.PPKLite signatures was introduced in Acrobat 5.0; 
additions to the JavaScript interface were introduced in Acrobat 6.0. Prior to Acrobat 6.0 
there was no support in Acrobat to enable JavaScript in third party security handlers.
Note that not all security handlers are JavaScript enabled, and not all JavaScript enabled 
handlers are enabled for all security operations. Third party public key security handlers 
may support JavaScript, but only if they use the new PubSec programming interface that 
was introduced in Acrobat 6.0. 
JavaScript enabled handlers provided by Adobe include: 
The Adobe.PPKLite security handler, supporting signature and encryption, on Windows, 
provides directory access through the Microsoft Active Directory Scripting Interface 
(ADSI).
The Adobe.AAB security handler provides a local address book and support for directory 
operations.