What does HRESULT 0x80091006 (CRYPT_E_AUTH_ATTR_MISSING) mean?

 
Previous Next
CRYPT_E_UNEXPECTED_ENCODING CRYPT_E_HASH_VALUE

CRYPT_E_AUTH_ATTR_MISSING

The signed message lacks an authenticated attribute that the caller expected. This is a message-profile or verification-policy problem, not proof that every certificate in the chain is invalid.

What to check for CRYPT_E_AUTH_ATTR_MISSING

  • Identify the exact authenticated attribute required by the application or protocol.
  • Inspect the signer information and distinguish a missing attribute from an invalid signature or untrusted signer.
  • Make the sender produce the required signed attribute instead of accepting an unsigned substitute.

Microsoft: CryptVerifyMessageSignature

Microsoft: CryptMsgGetParam

Diagnostic interpretation

CRYPT_E_AUTH_ATTR_MISSING has the HRESULT value 0x80091006. AllStat records the condition as “The cryptographic message does not contain an expected authenticated attribute.”.

Evidence to capture

  • Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the crypt / auth / attr / missing operation.
  • check the documented return contract of the specific API because the same HRESULT can require different recovery in different interfaces.

Retry and recovery

” has changed.


Looking for a different code? Search another status or error code.