2025-12-15 14:38:37.642583+0500 0x10075d6  Default 0x0 47707  0 mcades: (librdrsup.4.dylib) <capi20>CryptMsgGetParam!(dwParamType = 36) Exception :'KeyIdentifier field as KeyTransRecipientInfo->RecipientIdentifier is not supported.' at file:'/dailybuildsbranches/CSP_5_0r4w/CSPbuild/CSP/capilite/CMSEnvelopedMessage.cpp' line:2281
2025-12-15 14:38:37.642792+0500 0x10075d6  Default 0x0 47707  0 nmcades: (librdrsup.4.dylib) <capi20>CryptDecryptMessage!failed: LastError = 0x57

{
    "message": "The parameter is incorrect.\n (0x80070057)",
    "requestid": 7,
    "type": "error"
}

// здесь в base64 приходит зашифрованная и сжатая xml, нужно ее сначала дешифровать, а потом расжать :) только после этого получится достать данные xml
async function decryptGOST(base64: string): Promise<string> {
  // эт наши обвязки над cadesplugin, ни на что не влияет вообще
  const envResult = await cadesExtensionBridgeService.createObjectAsync('CAdESCOM.CPEnvelopedData');
  const env = envResult.unwrap();

  await env.Decrypt(base64);

  return env.Content;
}

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

async function encryptGOST(base64: string, thumbprintEncrypt: Array<string>) {
  const certs: Array<TCertificate> = [];

  for (const thumbprint of thumbprintEncrypt) {
    const cert = await getCertificate(thumbprint);

    certs.push(cert);
  }

  const envResult = await cadesExtensionBridgeService.createObjectAsync('CAdESCOM.CPEnvelopedData');

  if (envResult.isErr()) {
    throw new Error(envResult.unwrap().cryptoProInternalError.message);
  }

  const env = envResult.unwrap();

  const oAlgorithm = await env.Algorithm;
  await oAlgorithm.propset_Name(CADES_PLUGIN_CONSTS.CADESCOM_ENCRYPTION_ALGORITHM_GOST_KUZNYECHIK_OMAC);

  const recipients = await env.Recipients;

  for (const cert of certs) {
    await recipients.Add(cert);
  }

  return await env.StreamEncrypt(base64);
}