Show notes
Code signing uses a digital signature to help recipients verify the identity associated with a software publisher and determine whether the signed code changed afterward. Certification exams may ask candidates to connect code signing with authenticity, integrity, certificates, hashing, and public-key cryptography. The publisher calculates a hash of the software and signs that value with a private key, while the recipient uses the corresponding public key to verify the signature. A valid signature does not prove that software is safe, because a trusted developer may sign vulnerable code or an…
Website: share.transistor.fm
