"ant" wrote in message
...

[...]

http://www.tar.hu/wininternals/ch12lev1sec8.html

[...]

the key sentence for me there was this one - "Only the private/public
key pair certificate hash is used by the description process." I'm not
sure whether it is kind of secret information, but I failed to find
any other place in the Net which could tell this.

[...]

I believe that the point there was that the field itself contained only a
hash, not actually a key. If I'm understanding it correctly, it is a hash
that identifies a certificate that contains a key needed to decrypt the key
needed to decrypt the data.