digital-signature

checkmark when pdf signed with iText

I'm signing PDF's using iText. I'm including a graphic in the signature. This works, but the green checkmark (or yellow question mark) that shows when the document is verified interferes with the graphic I inserted, making the end result look ugly. Is there a way to manage the size of the green checkbox - are there any properties - fonts...

Error occurred while decoding OAEP padding

Hi, I am half th way of my problem,,. Please Help I have succesfuly encrypted the text using public key of digital signatures but while decrypting it. i am getting error Error occurred while decoding OAEP padding my piece of code #region Test Encryption public void a() { using (var rsa = new RSACryptoServiceProvider()) { // This St...

Error occurred while decoding OAEP padding

in continuation of the http://stackoverflow.com/questions/949907/error-occurred-while-decoding-oaep-padding question I have modified my code and now i am trying this code CspParameters cspParam = new CspParameters(); cspParam = new CspParameters(); cspParam.Flags = CspProviderFlags.UseMachineKeyStore; clsCertificates cc = new clsCer...

How do I digitally sign and trust a message in a distributed program I know can be reverse engineered?

The problem in brief: I develop an application (for example a game) which is distributed in binary form. The game calls home and sends the user's high score as a message to an online game server. What I'd like to do is digitally encrypt and sign the message so that I can trust it hasn't been tampered with. Public key cryptography relie...

How do I access the digital signature of an InfoPath form from a workflow created with SharePoint Designer?

I would like to create a workflow with SharePoint Designer that will run whenever an item in an InfoPath form library is modified that will check to see if the form has been signed. The form is a travel expense form. It will be created by a user, reviewed by an administrative assistant, and then approved or disapproved by the office ma...

XML Canonicalization algorithm gives two difference results when called directly than when called as part of an xml digital signature?

Hi all, I'm getting two different hashes of the same xml document when I directly canonicalize some xml than when I perform a digital signature on it which also performs the same canonicalization algoririth on the xml before hashing it? I worked out that the digital signature canonicalization includes the new line characters '\n' and s...

Digitally Sign Parts of a XML document

I have an XML document having structure similar to the following <envelop> <header>blaa</header> <message>blaa blaa</message> <footer></footer> </envelop> I want to digitally sign the header and message elements and add the signature to the footer element. How can I sign the elements and then later verify the signature (...

WinVerifyTrust to check for a specific signature?

I'm implementing a process elevation helper for Windows. It's a program that will run in elevated mode and launch other programs with administrator privileges without displaying additional UAC prompts. For security reasons, I want to make sure only binaries that are digitally signed with my company's Authenticode key can be executed. Th...

authentication token is encrypted but not signed - weakness?

Through the years I've come across this scenario more than once. You have a bunch of user-related data that you want to send from one application to another. The second application is expected to "trust" this "token" and use the data within it. A timestamp is included in the token to prevent a theft/re-use attack. For whatever reason (le...

Where is the certificate of a TSA stored in XAdES-T?

In XAdES-T, the <EncapsulatedTimeStamp/>-element contains the TimeStampToken received from a TSA and not the entire TimeStampResp. But this TimeStampToken does not contain the certificate of the TSA (which can be found in the SignerInfo of the SignedData container). Where am I supposed to store this certificate in the XAdES-document? ...

Checking digital signature programmatically

I have the exe for the project im working on signed by a digital signature which means when it asks for admin rights it shows the company name. This works very well but if you modify the exe it will still work and show unknown there instead. Is there a way to check the digital signature to see if it is valid when you run the exe to avo...

Must a secure cryptographic signature reside outside of the file it refers to?

I'm programming a pet project in Python, and it involves users A & B interacting over network, attempting to insure that each has a local copy of the same file from user C. The idea is that C gives each a file that has been digitally signed. A & B trade the digital signatures they have, and check it out on their own copy. If the signatu...

Generating Digital Signature

I wanted to generate digital signature in my asp.net application based on some value like date of birth. what is the way to do that ? i am using vb.net ...

Check signature of OSX bundle before load

Goal: Load .so/.bundle that has been verified to be signed (or verified against an arbitrary algorithm). I want to be able to verify a .so/.bundle either using OSX's builtin binary signature tools or some custom algorithm and then load that .so/.bundle with dlopen... The wrench in this is that there seems to be no programmatic way to c...

Check signature of Linux shared-object before load

Goal: Load .so or executable that has been verified to be signed (or verified against an arbitrary algorithm). I want to be able to verify a .so/executable and then load/execute that .so/executable with dlopen/... The wrench in this is that there seems to be no programmatic way to check-then-load. One could check the file manually and...

using RSACryptoServiceProvider or RSA in hosted environment

I would like to use Public/Private encryption where my web app would sign an xml document or a piece of data using a private key and it will be verified in the application using the public key, Is it possible to use RSACryptoServiceProvider in .net 2.0 hosted environment if not what are other possible workarounds? ...

In C#, sign an xml with a x.509 certificate and check the signature

Hi I'm trying to sign an XML file using a x.509 certificate, I can use the private key to sign the document and then use the CheckSignature method (it has an overload that receives a certificate as parameter) to verify the signature. The problem is that the user who validates the signature must have the certificate, my concern is, if t...

How to programmatically remove the digital signature from VBA macros in Excel?

Is there any way to programmatically remove the digital signature from the VBA macros of an Excel sheet? i.e. code that is equivalent to entering the VBA editor, going to Tools menu -> Digital Signature and clicking Remove. ...

Adding a GPG signature to an already signed document?

We'd like to implement a workflow that requires multiple people to digitallly sign a document. If I have multiple secret keys in my own keychain, I can do something as simple as: gpg --sign -u userid1 -u userid2 filename But what do I do if I've got an already signed document and I want to add a signature? One solution would be to h...

Signing .CAB files in linux?

Hi, I'm looking for a free (LGPL, etc) tool for digitally signing a Microsoft Cabinet files (.CAB) in Linux. I have found a tool that does that job, named osslsigncode: I can't use it in our commercial product since its GPL. I can't even buy it since the guys who wrote it are unavailable. For those who are wondering how I create the C...