---
id: object/codeunit/1476
type: object
title: Codeunit 1476 "RSA Impl."
summary: Codeunit 1476 "RSA Impl." in System Application (System.Security.Encryption). 16 public procedures. Introduced in BC27, still in BC30.
tier: official
language: en
tags:
  - codeunit
  - system application
versions:
  introduced: "27"
  last_changed: null
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: 8dd4152d31dcaf574494daabf805f88649fdf3e7ada6728ae48a4414f25578cd
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Cryptography%20Management/src/RSAImpl.Codeunit.al
    title: src/System Application/App/Cryptography Management/src/RSAImpl.Codeunit.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
  changes:
    - change/bcapps/9402
object_type: codeunit
object_id: 1476
name: RSA Impl.
namespace: System.Security.Encryption
app: System Application
extends: null
first_version: "27"
last_version: "30"
present_in:
  - "27"
  - "28"
  - "29"
  - "30"
changed_in: []
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 0
  procedures: 25
  events: 0
  subscribers: 0
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 0
  calls: 0
  called_by: 2
  implements: 1
---

# Codeunit 1476 "RSA Impl."

> Codeunit 1476 "RSA Impl." in System Application (System.Security.Encryption). 16 public procedures. Introduced in BC27, still in BC30.

System Application · System.Security.Encryption · BC27-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Cryptography%20Management/src/RSAImpl.Codeunit.al) · facts from BC29

## Properties

| Property | Value |
|---|---|
| Access | Internal |

## Procedures

- `InitializeRSA(KeySize: Integer)`
- `GetInstance(var DotNetAsymmetricAlgorithm: DotNet AsymmetricAlgorithm)`
- `SignData(XmlString: SecretText; DataInStream: InStream; HashAlgorithm: Enum "Hash Algorithm"; SignatureOutStream: OutStream)`
- `SignData(XmlString: SecretText; DataInStream: InStream; HashAlgorithm: Enum "Hash Algorithm"; RSASignaturePadding: Enum "RSA Signature Padding"; SignatureOutStream: OutStream)`
- `SignData(DataInStream: InStream; HashAlgorithm: Enum "Hash Algorithm"; SignatureOutStream: OutStream)`
- `SignData(DataInStream: InStream; HashAlgorithm: Enum "Hash Algorithm"; RSASignaturePadding: Enum "RSA Signature Padding"; SignatureOutStream: OutStream)`
- `VerifyData(XmlString: SecretText; DataInStream: InStream; HashAlgorithm: Enum "Hash Algorithm"; SignatureInStream: InStream): Boolean`
- `VerifyData(XmlString: SecretText; DataInStream: InStream; HashAlgorithm: Enum "Hash Algorithm"; RSASignaturePadding: Enum "RSA Signature Padding"; SignatureInStream: InStream): Boolean`
- `VerifyData(DataInStream: InStream; HashAlgorithm: Enum "Hash Algorithm"; SignatureInStream: InStream): Boolean`
- `VerifyData(DataInStream: InStream; HashAlgorithm: Enum "Hash Algorithm"; RSASignaturePadding: Enum "RSA Signature Padding"; SignatureInStream: InStream): Boolean`
- `Encrypt(XmlString: SecretText; PlainTextInStream: InStream; OaepPadding: Boolean; EncryptedTextOutStream: OutStream)`
- `Decrypt(XmlString: SecretText; EncryptedTextInStream: InStream; OaepPadding: Boolean; DecryptedTextOutStream: OutStream)`
- `ToSecretXmlString(PrivateKey: SecretText; IncludePrivateParameters: Boolean): SecretText`
- `ToSecretXmlString(IncludePrivateParameters: Boolean): SecretText`
- `FromSecretXmlString(XmlString: SecretText)`
- `ExportRSAPrivateKeyPem(): SecretText` (internal)

Plus 9 local procedures.

## Called by

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 1475 "RSA"](../codeunit/1475.md) (6 calls: `Decrypt → Decrypt`, `Encrypt → Encrypt`, `InitializeRSA → InitializeRSA`, …)
- [Codeunit 1285 "X509Certificate2 Impl."](../codeunit/1285.md) (2 calls: `CreateFromPemAndExportAsBase64 → ExportRSAPrivateKeyPem`, `CreateFromPemAndExportAsBase64 → FromSecretXmlString`)

## Implements

- [Interface "Signature Algorithm v2"](../interface/signature-algorithm-v2.md)

## Recent changes

- 2026-07-17 [#9402 Fix RSA private key PEM import](../../changes/bcapps/9402.md) (main, BC30, fix)

## Across versions

- Present in: BC27-30
- Changed (declaration) in: none

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "codeunit", object_name: "RSA Impl.")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.