U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Protecting Software Integrity Through Code Signing

Published

Author(s)

David A. Cooper, Leonard Feldman, Gregory A. Witte

Abstract

This bulletin summarizes the information found in the white paper Security Considerations for Code Signing, which describes features and architectural relationships of typical code signing solutions that are widely deployed today. The paper also defines use cases and identifies security problems that can arise when applying code signing solutions to those use cases. Finally, recommendations for avoiding those problems and resources for more information are included.
Citation
ITL Bulletin -
NIST Pub Series
ITL Bulletin
Pub Type
NIST Pubs

Download Paper

Local Download

Keywords

code signing, digital signature, firmware, software
Cybersecurity, Cryptography and Software research

Citation

Cooper, D. , Feldman, L. and Witte, G. (2018), Protecting Software Integrity Through Code Signing, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=925977 (Accessed April 26, 2024)

Created May 23, 2018, Updated May 4, 2021