Code Signing - Providing Security

Providing Security

Many code signing implementations will provide a way to sign the code using a system involving a pair of keys, one public and one private, similar to the process employed by SSL or SSH. For example, in the case of .NET, the developer uses a private key to sign their libraries or executables each time they build. This key will be unique to a developer or group or sometimes per application or object. The developer can either generate this key on their own or obtain one from a trusted certificate authority (CA).

Code signing is particularly valuable in distributed environments, where the source of a given piece of code may not be immediately evident - for example Java applets, ActiveX controls and other active web and browser scripting code. Another important usage is to safely provide updates and patches to existing software. Windows, Mac OS X, and most Linux distributions provide updates using code signing to ensure that it is not possible for others to maliciously distribute code via the patch system. It allows the receiving operating system to verify that the update is legitimate, even if the update was delivered by third parties or physical media (disks).

Read more about this topic:  Code Signing

Famous quotes containing the words providing and/or security:

    When the Somalians were merely another hungry third world people, we sent them guns. Now that they are falling down dead from starvation, we send them troops. Some may see in this a tidy metaphor for the entire relationship between north and south. But it would make a whole lot more sense nutritionally—as well as providing infinitely more vivid viewing—if the Somalians could be persuaded to eat the troops.
    Barbara Ehrenreich (b. 1941)

    Those words freedom and opportunity do not mean a license to climb upwards by pushing other people down. Any paternalistic system that tries to provide for security for everyone from above only calls for an impossible task and a regimentation utterly uncongenial to the spirit of our people.
    Franklin D. Roosevelt (1882–1945)