Code Signing
- •
def
- •
using a Digital Signature to prove that a piece of software (an update, patch, or executable) genuinely came from its claimed publisher and has not been altered
- •
- •
how it works
- •
the publisher hashes the code to get a digest, encrypts that digest with their private key, and distributes it alongside the code and their certificate
- •
the recipient's system decrypts the signature using the publisher's public key, hashes the received code itself, and compares the two digests — a match confirms both integrity (the code hasn't changed) and non-repudiation (it really came from that publisher, since only they hold the private key)
- •
- •