Questions tagged [digital-signature]
The digital-signature tag has no usage guidance.
177 questions
0
votes
0answers
75 views
Trick Windows 10 or other programs to think driver signature enforcement is enabled or enable it without a reboot? [closed]
So most of you have heard about DifferentSLIAuto which lets you run non SLI cards in SLI mode.
I am using the same and it's working exceptionally! No issues whatsoever.
However, it requires editing ...
2
votes
1answer
57 views
+100
Sign only using GpgOL in Outlook
I currently have the Outlook plugging GpgOL which lets me encrypt/sign emails using an OpenPGP encryption key.
Is it possible to somehow remove the encryption option or somehow hide the encryption ...
1
vote
1answer
37 views
How to fake handwriting on pdf without printer and scanner?
Bureaucracy sometimes requires us to print a document, fill in blank fields, sign it, scan it and send it back. Is there an easy way to fool the bureaucrats when no printer or scanner are available? I ...
0
votes
0answers
8 views
How to print list of signatures of XPS document
I need to print the XPS document with information of signers. I don't know hot to do it. In windows XPS viewer I have a pane called signatures, there is a list of people who put his own signatures.
...
0
votes
0answers
25 views
Forensics on a single CD-Rom Disc
Is there a way to find out information as to what device created the data on a CD-Rom in addition to when the disk was formatted and burned? I have a friend facing criminal charges based solely on a ...
1
vote
1answer
41 views
Windows 10 Driver(without hardware device) with Error 39, 0xc0000603, Certificate Revoked
Well, the driver was signed by EV Signing Certificate and Microsoft Windows Hardware Compatibility Publisher(WHLK\WHQL)
With Secure Boot on Win 10 machine, I got the error code 39(Windows cannot ...
11
votes
1answer
1k views
How can I verify that a Windows XP POS operating system executable is authentic?
I have a 3rd party firewall that alerted me that msiexec.exe was replaced by another version. The timing didn't correspond to an OS update, so I was worried a bad actor replaced the exe. How can I ...
0
votes
0answers
58 views
Outlook 2016 Pro Plus Digital Signature issue
in my organization there are 50 clients, circa (Windows 10). On 8-10 of these, there's a single mail account configured with IMAP in Outlook 2016. From 15/10/2018 some emails from inbox automatically ...
0
votes
2answers
29 views
Issues understanding CA certificates
I have misconceptions regarding CA (Certificate Authority) certificates. No matter how many things I read, it is still not fully clear.
Let's take an example, Bob accesses a website. In order for ...
1
vote
0answers
71 views
Windows 10 - Different methods to disable driver signature check and their realations
For Windows 10
I am examining different methods to monitor the disabling of "driver signature check". From a search online I found 3 main method:
from administrator cmd run:
bcdedit.exe -set ...
0
votes
0answers
10 views
Only protect part of a Word document with signature
I want to use the digital signature feature of MS Word to protect the document, however I only want to protect part of the document. For example, once signed pages 1-2 cannot be edited, but pages 3-4 ...
0
votes
2answers
78 views
gpg-zip using secret key sign a zip
I have the following problem.
I created a Key-Pair with Thunderbird (Engimail), then I exported the asc file, and importet it in the git bash to gpg.
Now I need to sign a zip.
Using the command:
...
1
vote
2answers
61 views
How to create GlobalSign Timestamp Digest?
I am attempting to use the Global Sign Digital Signing Service API to sign a PDF document. I have received some of their documentation. But I am unable to understand their request to provide a "digest"...
2
votes
2answers
274 views
Digitally signed driver not verified by Windows (Code 52)
I am installing the I2CTools USB-to-I2C Elite driver for Win 10 x64, but I got a dialog saying ”Jungo Connectivity: a digitally signed driver is required.”
In device manager the two drivers ...
1
vote
0answers
110 views
how to manually verify PDF signature (contents field: rsaEncryption) [closed]
I would like to manually validate RSA signed PDF document but I'm failing receiving different signature than then one encoded inside PDF. Here are the steps I followed, any help/hints really ...
0
votes
0answers
88 views
Signing a message with a SmartCard / Yubikey
So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4.
Now, on a fresh setup, I want to try and use those keys, to sign something....
0
votes
0answers
71 views
How to use PIV smartcards (YubiKey 4) to sign application binaries?
I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
6
votes
3answers
2k views
How to verify a digital signature on a PDF on Linux?
I am a Linux desktop user.
Someone sends me a PDF file which is digitally signed. It is supposed to be signed using some kind of government / regulated body / official institution issued certificate.
...
1
vote
0answers
328 views
Prevent losing a digital Signature when a document is saved?
The question
What is an effective work-around to prevent a Digital Signature dropping from a file when it's saved? Or, What would be an efficient way to replicate saving data to a Macro Enabled MS ...
0
votes
2answers
886 views
S/MIME signed email loses attachment
We have a small number of users who digitally sign (but don't encrypt) their email. When they send attachments, it usually works fine. However, when the recipient is using Outlook Mobile, all ...
0
votes
0answers
47 views
Importing personal certificate for signed/encrypted emails does not work
I want to send encrypted emails with Outlook 2016 and I'm running Windows 10 Pro. I created a personal certificate by Comodo. When I try to import the user.crt into my personal certificate store, it ...
0
votes
0answers
248 views
This digital signature is invalid and cannot be trusted. The macros will be disabled
I am using MS Excel containing macro at customer place for some automation in excel. When the customer opens excel containing macro with the valid EV digital signature (Also tried with previously ...
1
vote
0answers
206 views
How to sign with a specific subkey using GnuPG?
Say I have two subkeys like below.
/c/Users/user/.gnupg/secring.gpg
---------------------------------
sec 2048R/DC****** 2017-05-25
uid J D <J.D@gmail.com>
ssb 2048R/...
0
votes
1answer
210 views
Verifying/decrypt email using PGP signature/public key
UPDATED QUESTION:
Using Outlook 2013 64bit on Windows 7 64bit, I have setup GnuPG which allows me to send encrypted emails. To do that, I asked someone for their public key. I sent them an email ...
0
votes
0answers
104 views
NTLM Session Security
Among authentication NTLM does also provide Session Security in form of signing and sealing. I found a very good documentation about these features and how they work. However, so far I was not able to ...
1
vote
1answer
113 views
How to do RPM package signature verification in Windows?
I’m trying to do GPG signature validation to Centos 7 RPM files that I have downloaded. They are validated during the first download, but I am trying to another validation after they have been ...
0
votes
0answers
104 views
Permanent accept of java certificate is not woring on windows 10
Usually when starting a signed Java Application - no matter if starting inside a browser as applet or via JNLP/JavaWebStart – there is a warning prompt notifying if to run the application.
On ...
0
votes
1answer
518 views
Programmatically getting an executable's Certificate Details
It is possible to somehow programmatically export a file's digital certificate's subject if the certificate itself is not installed on the workstation but is only used to sign that specific file?
I ...
2
votes
1answer
643 views
minispy - Windows cannot verify the digital signature for this file
I have built the Microsoft sample minispy minifilter with no issue. I made sure that since I am using 64-bit, I have also compiled in x64 on my Visual Studio. Tried both Debug and Release. Hence in ...
0
votes
0answers
323 views
Image signatures & content trust with Notary + OpenShift?
RedHat has their own "Atomic" (Docker) image signing and verification method described here. The usage of atomic signatures in signing the images and verifying image integrity within OpenShift is well ...
0
votes
1answer
1k views
How do I check gpg signature given only the fingerprint and key ID?
I am trying to check the integrity of my gmp-6.1.2.tar.lz download (see here). I am on CentOS 6.6 using gpg (GnuPG) 2.0.14.
The GMP website only lists
Key ID: 0x28C67298
Key type: 2560 bit RSA
...
0
votes
1answer
99 views
How to modify a resource in exporer.exe
I've created a notification icon that's much more visible than the existing black and white one. This icon has exactly the same size in bytes as the existing one, so I was hoping I could replace it ...
1
vote
0answers
92 views
Windows 10: will drivers installed using testmode still work then testmode is disabled?
I have a general understanding problem with Windows Testmode and how to install unsigned drivers: I understand that if I have drivers (in my case for an USB to RS232 serial adapter) that are not ...
0
votes
0answers
120 views
How can i force firefox to execute only EV digitally signed javascript?
Here’s why the epidemic of malicious ads grew so much worse last year
Forced redirects from Zirconium group push phony malware and fake Flash updates.
DAN GOODIN - 1/23/2018, 5:00 AM Malicious ...
-1
votes
1answer
90 views
Where can I get a X509 certificate with my email address embedded and nonRepudiation and digitalSignature bits set? [closed]
I would like to buy a X.509 certificate for user authentication not for SSL. The certificate should have my email address in it and should have 2 bits set in KeyUsage extension:
nonRepudiation
...
1
vote
1answer
472 views
Is it possible to find signer's email address(es) from an OpenPGP (GnuPG) signed message?
I have two files bla.txt and bla.txt.sig.
The latter is the signature for the first.
I do not (yet) know who is the signer.
GnuPG just says (correctly): "No public key".
With the email address I could ...
1
vote
2answers
138 views
Inspecting digital signature in PDF file
I have a PDF that was signed with a certificate from a PKCS#11 module (a Belgian identity card reader, also known as eID) using Adobe Acrobat Reader DC. How can I inspect the signature that's attached ...
0
votes
2answers
556 views
0
votes
1answer
452 views
Digitally sign my word or pdf document with timestamp
I need to find a way to digitally sign my word or PDF document with a digital timestamp to prove that the content (mainly text content and images) has not been changed since ever then.
I need whoever ...
0
votes
0answers
1k views
How to sign drivers properly for Windows 10
I am currently developing drivers for Windows 10, and I also have a code-signing certificate. When I sign my files, they get the signature and a hash set in the properties. However, Windows 10 refuses ...
1
vote
1answer
53 views
What is difference between E signature (Electronic Signature) and Digital Signature?
I would like to understand difference between E Signature (Electronic Signature) and Digital Signature ? Can we replace digital signature with e signature ? what is benefit to use e signature over ...
0
votes
1answer
700 views
OpenSSL on Windows: Problems by signing a file through commandline
I have to sign an XML-File with OpenSSL on a Windows-Server 2012 through command-line.
Unfortunately it didn`t work out if I set the passphrase inside the command.
I then always get the error: "Can ...
0
votes
1answer
74 views
What kind of certificate do you need to digitally sign an .exe?
I want to digitally sign a setup.exe file for Windows.
According to https://msdn.microsoft.com/en-us/library/ee290833(v=vs.100).aspx I need a "certificate" to do so.
What kind of certificate do I ...
4
votes
3answers
1k views
What determines the clearsign hash algorithm used by GnuPG?
When using GnuPG to clear sign a text, there is a hash part in signed message. Take the example:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
abc
-----BEGIN PGP SIGNATURE-----
...
2
votes
1answer
98 views
What is the most practical way of finding out which certificate is the problematic one?
I've been using wsusoffline for quite sometime, but recently, I've had this problem. The program downloads an update but then immediately deletes it producing the following warning in the log:
...
1
vote
2answers
171 views
GnuPG with CAPI smartcard / NOT an OpenPGP card
I have a RSA SecurId loaded with two keys and their corresponding certificate (signature and authentication).
I'm already using the authentication key pair for SSH login (from my Windows desktop) ...
1
vote
0answers
375 views
Driver installation failed despite test mode
I have test mode enabled. But still, I get the message that the driver couldn't be installed (Code 52).
Context: I'm trying to connect a TI84+ with my Windows 7 PC with an USB cable to transfer files,...
2
votes
1answer
1k views
How to specify which key to use for GnuPG sign/verify?
We have a package that we're trying to create a detached signature for, to ensure the other end can be confident it's from us.
I know how to specify the correct identities when creating a key-pair ...
1
vote
0answers
349 views
Disable installation permission popup for my installer
I built an application and signed it. The update method of the application is to update silently automatically each time there is a new version.
The problem is, I expected that the "Do you want to ...
0
votes
1answer
277 views
Clonezilla's checksums file verification using signature with gpg extension
There are CHECKSUMS.TXT and CHECKSUMS.TXT.gpg files available on the Clonezilla Live's official download page.
However I cannot verify its signature by usual verify command:
$ gpg --verify --...
