Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Protecting Software Integrity Through Code Signing



David A. Cooper, Leonard Feldman, Gregory A. Witte


This bulletin summarizes the information found in the white paper Security Considerations for Code Signing, which describes features and architectural relationships of typical code signing solutions that are widely deployed today. The paper also defines use cases and identifies security problems that can arise when applying code signing solutions to those use cases. Finally, recommendations for avoiding those problems and resources for more information are included.
ITL Bulletin -


code signing, digital signature, firmware, software
Created May 23, 2018