digital-signature

How can I get the Digital Signature from dll file, .NET reflection possible?

Hi All, the digital signature could be found by, r.click on dll file, or any other file -> select digital signature tab. How can i do it by c sharp code? the reason of this tool is to test that all the files have the signature. ...

strategy for digitally signing a process?

I'm developing a web application, and I'd like to digitally sign a certain step in a process That is, a user of the app performs a certain action, and I'd like that event to be digitally signed. The user should use and usb token when issuing the action to digitally sign it. I'd like to know which approach do you recommend to do such a...

Getting a trusted signature for a Java Web Start application

I'm planning to distribute an application over the internet with Java Web Start, and I'm aware that I'll need to sign the application to enable certain security privileges (network connections, dynamic class loading etc.) What is the best way to create/obtain a signature for this purpose? In particular I'm interested in: Minimising t...

Outlook VBA MessageClass - Save Digital Signature

I am trying to write an Outlook 2007 VBA script which will look at the currently opened mail item and be able to read the properties of and save off the digital signature of said mail item. Now I realize that Outlook prevents access to encrypt/sign a new email programatically, but here I am focused on messages which have already been re...

RSA PKCS#1 compliant signature

I am using PKCS#1 2.0 (OAEP) standard (signature with appendix), but there are some issues not clear to me. What is the physical object that is beeing signed? I know it's hash function value and so on (I do know the algorithm), but is it calculated from the binary fform of the file, no matter what is the content? What is the physical r...

xades-t format with java xml signing api

Hello, I would like to use java xml signing api for xades-t signature type. I need to do a canonical transform on signature value node, get a timestamp and insert the result under the object tag. I can successfully use the api to do regular signing, but I am confused about getting one step further. any pointers are very much appreciated....

How to detect whether Outlook digitally signs an email by default?

Background: I'm working on an Outlook addin which adds an attachment to outgoing emails. Support is required for all versions of Outlook. When a MailItem has been signed with a digital signature, adding an attachment to this mailItem generally fails unless you save the mail item. This removes the signature from mailitem. To me, this is ...

How to sign text or XML with PFX asking for the private key password. (VS 2005)

Hi, I´m trying to sign some text or XML node using my certificates, installed on Internet Explorer or from filesystem (or some method!)...but I want to ask the user for his certificate password when signing. If i´m not wrong, I think that I need that password to access the private key and with that key, sign my data....is ok? Nothing t...

algorithm for multiple digital signatures?

suppose I have a packet of data and that I am sending the data to 10 users. I want to add an attribute to this data, something like a digital signature. Each of the 10 users would have a different "key". When they apply their key to this special signature on the data packet it returns either true or false. However they cannot determine, ...

Reading RSA Private Key in PEM format And Reading public Key from certificate

I'm trying to use a PEM(X.509) certificate (stored in a privateKey.pem file on disk) to sign messages.After that i need to verify signature by using certificate (sent to the receiver). Help with this, especially example code in c# and RSA algorithm ...

XML Digital Signature in .NET

I would Like to know which type of certificate do I need to get from a Certification Authority to Sign an XML Document in .NET ? We have a xml eletronic invoice that we need to sign using a Digital Certificate. Any thoughts? ...

Problem with MS Word 2003 suddenly removing digital signature added for macro

We have a document which contains, checkbox (OLE), text form fields and drop down lists. The document is protected and allows form filling only. The behavior of MS Word is very inconsistent and sometimes the digital signature is removed on save. MS Word displays a prompt saying that the signature has been tampered and it will be remov...

how secure is a digital signature?

Digital signature, if I understood right, means sending the message in clear along with a hash of the message which is encrypted using a private key. The recipient of the message calculates the hash, decrypts the received hash using the public key, then compares the two hashes for a match. How safe is this? I mean, you can obtain the ...

How to generate Axis2 XML Signature with distributed certificates

I have somewhat of a problem. We have a centralized interface engine that will talk to a web service that will provide information complement and allow to submit request to external systems. All this is good and fine until we have to integrate this with the required security from this provider. They issue certificates distributed thro...

M2Crypto: verifying DSA signatures

I'm having trouble verifying DSA signatures using Python/M2Crypto. The signatures are generated in Java, using standard java.security.Signature class, with Sun's crypto provider and SHA1withDSA algorithm designation. Here's some shell output: >>> pk <M2Crypto.DSA.DSA_pub instance at 0x20b6a28> >>> sig = '302c02141c4bbb218215ebfec572880...

Using git with a proxy that rewrites SSL certificates

Hi, at $WORK, we have to use an introspecting web proxy that rewrites the SSL certificate chain. I can verify this by using curl to get an https URL or running (o.k., trying to run :-) ) the firefox plugin updater. The windows port of GIT, http://code.google.com/p/msysgit/, also complains about broken certificates. Is there a way to fo...

Open and verify signed documents

Hello, I have clear the process to sign a document. You need a certificate made by a CA. You have a public and private key. With the private you sign and with the public the people open your signed document. When you sign a document a math algoritm process the file and then generate a hash, later with the private key this hash is encrypt...

Email in Digital Signature

How do you add an email to your digital signature details? Digital signature details are found when a file is signed for instance by VeriSign. You then right-click on the file and choose "Digital Signatures" from the tab. You can then select the Name of the signer and select the "Details" button. I can't find this anywhere. Even Mi...

Digital Signature Standard Office 2003

Hello, Anybody know which standard use Office 2003 to sign a document? Office 2007 uses XML-DSig Office 2010 uses XAdES Office 2003 ¿? ...

Distinguishing signed Java applets

I have a Java applet which doesn't need any special privileges to run (i.e, it runs fine in the sandbox), but which expects the user to enter some sensitive information. Therefore, I'd like the user to be able to verify the origin of the applet. I then signed the applet, and everything appears to be working correctly. The browser appare...