title: Signing and encryption formats/specs for Windows PPKG provisioning files
body: <p>I am researching a possible project for building provisioning package files (.ppkg) files as created by the Windows Configuration Designer (see <a href="https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-packages" rel="nofollow noreferrer">here</a> for context). My goal is to build a C# assembly I can integrate into an existing application. I have already found documentation and code bases from which I have coded a working proof-of-concept that will create an unencrypted and unsigned .ppkg file. The only missing pieces are signing and encryption (which are existing features of the Windows Configuration Designer). I am looking for information on the algorithms and data formats applied by the Configuration Designer when it signs and/or encrypts a package, so that I can replicate these features in my assembly.</p>