Questions tagged [digital-signature]
The digital-signature tag has no usage guidance.
208
questions
50
votes
6
answers
19k
views
Is it possible to sign a file using an ssh key?
I use SSH (OpenSSH 5.5p1 on Linux, to be precise). I have a key, on which i have a passphrase. I use this for the usual logging in to computers stuff.
Can i also use it to sign files?
As i ...
- 1,773
25
votes
4
answers
22k
views
How to verify a digital signature on a PDF on Linux?
I am a Linux desktop user.
Someone sends me a PDF file which is digitally signed. It is supposed to be signed using some kind of government / regulated body / official institution issued certificate.
...
- 401
22
votes
9
answers
38k
views
How to sign a pdf in Okular or other FOSS program?
How do I sign a PDF in Okular? I tried searching for about 20 mins, but I can't find any answers...
I have a .png of my signature, and I basically want to insert it into the document on the dotted ...
- 535
22
votes
4
answers
20k
views
GPG - verifying signatures without creating trust chain?
Is it possible to ask gpg (or gpg4win) to just verify whether a file was signed by a particular public key file, without having to import and sign and trust that key?
i.e. something like
gpg --using-...
- 2,297
17
votes
2
answers
5k
views
How do I allow cross-signed kernel drivers in Windows 10 version 1607 with secure boot enabled?
Windows 10 Version 1607 (aka Anniversary Update) is now enforcing the tightened kernel driver certification which was already announced 2015 as a requirement for Windows 10. The new rule is that all ...
- 456
16
votes
5
answers
19k
views
Is it possible to sign archives?
I played with openssl to make a pub/prv key and create a signature of a file and validated it. I toyed with Cryptophane (windows gnupg frontend) and heard about keyservers+played with signing text.
I ...
user3109
14
votes
1
answer
44k
views
How to sign gmail email with digital signature?
I have my personal digital signature on the special card and the according reader. How can I sign an email (sending it with gmail) with this signature? I am on the latest OSX and use Google Chrome (...
- 626
12
votes
4
answers
13k
views
Embed a GPG Signature in a PDF File
Is it possible to embed GPG signatures in PDF files the way it can be done with X.509 signatures?
(I've been using JSignPDF to sign my invoices so far, but now the law has relaxed a bit, and it doesn'...
- 1,412
11
votes
1
answer
2k
views
How can I verify that a Windows XP POS operating system executable is authentic?
I have a 3rd party firewall that alerted me that msiexec.exe was replaced by another version. The timing didn't correspond to an OS update, so I was worried a bad actor replaced the exe. How can I ...
- 483
10
votes
2
answers
8k
views
Verify that a GPG-encrypted file is signed by particular user(s)
I've got a file encrypted and signed by GPG.
In the man page for gpg, for the --decrypt option, it says:
If the decrypted file is signed, the signature is also verified.
I'd like to do more than ...
- 1,249
9
votes
1
answer
12k
views
Sign & Encrypt vs. Encrypt & Sign - What does GPG do?
I’ve already read the discussion Should we sign-then-encrypt, or encrypt-then-sign? and the paper Defective Sign & Encrypt in S/MIME,
PKCS#7, MOSS, PEM, PGP, and XML. My question has to do with ...
- 724
9
votes
4
answers
3k
views
Is there a free PDF printer / distiller that creates signable documents? [closed]
I've used various methods (mentioned elsewhere on this site) to create PDFs, using a printer driver or converting from PostScript, etc. The common problem is that if I open any of the output files in ...
- 1,620
8
votes
1
answer
5k
views
Microsoft Word and digital signatures using PGP?
I have a document for a project that I am working on with my team, and I need to digitally sign the document in a way that can be verified by other members of the team. The catch is, internally, we ...
- 183
8
votes
1
answer
2k
views
How to verify an email signature from Facebook?
Facebook allows users
to add OpenPGP public keys to their profile; these keys can be used to "end-to-end" encrypt notification emails sent from Facebook to your preferred email accounts. – ...
- 221
7
votes
3
answers
7k
views
Where to find the latest digitally signed Synaptics touchpad driver?
In the past, Synaptics provided their touchpad drivers in a digitally-signed self-extracting executable. For example, here is an older version of the driver hosted on the official Synaptics website, ...
- 71
6
votes
1
answer
4k
views
How much information is included with a GPG signature?
Let's say you verify someone's signature with GPG:
$ gpg --decrypt statement.txt.sig
"I am not a crook."
gpg: Signature made 17 Nov 1973 9:31:50 AM CDT using RSA key ID 92861D99
gpg: Good signature ...
- 3,997
6
votes
2
answers
11k
views
Windows Explorer file property does NOT show digital signature info for some system file, why?
For example, PEauth.sys on Windows 7 and 8.1.
Windows Explorer file property dialog does not show Digital Signature tab for this file, but Sysinternal sigcheck.exe says it is digitally signed.
Can ...
- 5,904
6
votes
1
answer
2k
views
How do I digitally sign a 64-bit kernel mode driver?
I have a kernel mode driver and I have to install it on 64 bit win 7. It needs to be digitally signed. I digitally signed it using the dseo13b.exe. But when I load the driver I get error in the system ...
- 61
6
votes
1
answer
1k
views
How do I sign a file using SSH and verify it using a certificate authority?
I would like to give a selected number of developers ability to run code on a system, and verify it using OpenSSH's -Y verify feature.
# Generate the certificates, and sign the dev cert with the root ...
- 203
6
votes
2
answers
10k
views
Need a solution to verifying expired digital signatures
I use digital signatures for signing my invoices (required by law for digital invoicing in my country). The problem is, my local authority issues signing certificates that are only valid for a year (...
- 1,412
6
votes
2
answers
25k
views
How to install unsigned drivers on Windows 7?
I'm trying to install FreeOTFE on 64bit Windows 7. FreeOTFE comes with many drivers for various encryption algorithms, that need to be installed.
Windows gives me the error, that since those aren't ...
- 2,881
6
votes
4
answers
7k
views
Signtool can't do SHA256 signing on Windows 7
I have been using SHA1 signing for many years, but from 2016, Windows is forcing developers to use SHA256.
Windows Enforcement of Authenticode Code Signing and Timestamping
By using Windows 7 SDK ...
- 173
6
votes
1
answer
17k
views
Windows 7 claims driver is not digitally signed, but it is
On this system the WLAN AutoConfig service will not start:
In error log/system:
"The WLAN AutoConfig service depends on the NativeWiFi Filter service
which failed to start because of the following ...
- 296
6
votes
3
answers
7k
views
What determines the clearsign hash algorithm used by GnuPG?
When using GnuPG to clear sign a text, there is a hash part in signed message. Take the example:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
abc
-----BEGIN PGP SIGNATURE-----
...
- 85
6
votes
2
answers
5k
views
Trusted email: Digital signature with Gmail (IE)
There are places in the internet, where you can get a free digital signature for email.
How can I use it with Gmail and Internet Explorer?
- 224
6
votes
2
answers
2k
views
How can I digitally sign a PDF document quickly and cheaply?
I need to digital sign a PDF document. However, Acrobat reader does not let me sign documents. I just need to sign the document, not edit it.
Do I need to buy the full Acrobat software?
Or is there ...
5
votes
2
answers
6k
views
Can you use an SSL certificate provided by LetsEncrypt.org to digitally sign pdfs?
Let's say that I have an SSL cert (x.509 cert) that I use to provide my personal website via HTTPS. Is it possible to use this cert to digitally sign pdfs in Acrobat DC which come from me? Would I ...
- 315
5
votes
1
answer
1k
views
How to merge several detached signatures from different people into one?
A group of people wants to publish a file and they all want to digitally sign the file as different recipients of the file will have different chains of trust. For simplicity, it's desired that there ...
- 3,153
5
votes
1
answer
24k
views
How to verify digital signature for a Visual C++ Redistributable installation
I recently installed a digitally signed program and the installer launched an internally packaged Microsoft Visual C++ redistributable installer halfway in.
I scanned the program and checked its ...
- 789
5
votes
5
answers
9k
views
GnuPG Command Line - Verifying KeePass Signature
I'm trying to verify the PGP Signature of the latest version of KeePass 2.14's setup file against this signature, but this is the output I receive:
C:\Program Files (x86)\GNU\GnuPG>gpg.exe --...
- 173
5
votes
2
answers
4k
views
Digitally sign latex pdf document with CA
I would like to know, if it is possible to digitally invisible sign a pdf created by latex automatically after
each time I create the document (I'm using Texnic Center) or
after I created the ...
- 151
4
votes
1
answer
6k
views
Relation between .p7b and .spc digital certificate files
My company have just renewed their digital certificate from Thawte. The previous certificate I was using had an 'spc' extension. The new certificate I've been handed ends in a 'p7b'.
Although I can ...
- 759
4
votes
3
answers
4k
views
Digitally signed driver not verified by Windows (Code 52)
I am installing the I2CTools USB-to-I2C Elite driver for Win 10 x64, but I got a dialog saying ”Jungo Connectivity: a digitally signed driver is required.”
In device manager the two drivers ...
- 153
4
votes
2
answers
1k
views
Why is package/code signing considered more secure, and how does it work?
Kind of a noob question, but I've been reading about signing and how it makes linux distros more secure. Docker recently added image signing, which seems cool. Why is this so important? Just because I ...
- 43
4
votes
2
answers
12k
views
VirtualBox fails to start on Windows Server 2003
For reasons I cannot disclose, I need to install a Linux server within a VirtualBox host running in Windows Server 2003. Unfortunately, VirtualBox fails to start, giving me an error that seems to ...
- 41
4
votes
3
answers
3k
views
Why Outlook client's S/MIME settings use SHA1 as the default Hash Algorithm for digital signing a message?
can someone tell why Outlook client S/MIME settings use SHA1 as the default Hash Algorithm?
Doesn't that put the certificate private key to a risk when weak algorithm is used? Or am I ...
- 41
4
votes
2
answers
8k
views
How to fake handwriting on pdf without printer and scanner?
Bureaucracy sometimes requires us to print a document,
fill in blank fields, sign it, scan it and send it back.
Is there an easy way to fool the bureaucrats
when no printer or scanner are available?
...
- 231
4
votes
1
answer
5k
views
How to make computer (or user) trust signed software
I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2.
The signature is OK (as it shows in file ...
- 43
4
votes
2
answers
6k
views
Export Microsoft Word document for Adobe Acrobat signature
When I save a MS Word document (.docx) as a PDF, I am not able to sign it in Adobe Acrobat. Is there a way to export an MS Word doc to a signable PDF? Third party products are an option as well.
- 272
4
votes
0
answers
6k
views
gpg: skipped "12345689": Unusable secret key / how to use signing subkey for gpg?
As you see, I have a key with id 12345689, and I'm trying to sign with it in git
gpg -k
/home/lz/.gnupg/pubring.kbx
---------------------------
pub rsa4096 2020-03-02 [C]
12345689
uid ...
- 141
4
votes
1
answer
3k
views
Delete the digital signature from a received Outlook message
My goal is to delete the digital signature in an Outlook message. My initial idea was to create a VBA script (which I have done below) to enumerate all attachments in the selected mail item and ...
- 103
4
votes
3
answers
11k
views
How do I disable digital signature checking for Windows 8.1 EFI files?
I'm trying to patch my bootmgfw.efi file to change the background color of the BitLocker password prompt and other Windows bootup screens. I found the values to search for and replace for the color (...
- 684
3
votes
1
answer
877
views
How to use PIV smartcards (YubiKey 4) to sign application binaries?
I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
- 436
3
votes
2
answers
7k
views
Programmatically getting an executable's Certificate Details
It is possible to somehow programmatically export a file's digital certificate's subject if the certificate itself is not installed on the workstation but is only used to sign that specific file?
I ...
3
votes
1
answer
855
views
How can an unsigned driver affect the Windows OS?
There are lot of signed drivers (signed by Microsoft) that don't affect the Windows OS. If an unsigned driver is installed in a Windows machinehow can it affect the stability of the operating system, ...
- 915
3
votes
1
answer
6k
views
How does gpg handle multiple keys in a keypair?
As I understand it, keypairs used with gpg generally have more than one associated key: one for signing and one for encryption. How are these multiple keys managed when using gpg (to push to a ...
- 12.9k
3
votes
2
answers
3k
views
Does Windows actually verify digital signatures in the Properties dialog?
When downloading executables from the Internet, I always check to see if they are digitally signed before I feel safe running them.
In Windows, when right-clicking a digitally-signed file and ...
- 31
3
votes
1
answer
866
views
Windows certificate valid even after expired
I have a signed executable. The certificate for that signature says it is usable until 2007, still Windows (7 Professional) says it is valid if I'm opening it via properties dialog.
How is that ...
- 193
3
votes
1
answer
209
views
Can signature verification expose a rootkit?
I know that rootkits operate as part of the kernel, driver or service running on the system, injecting themself into DLLs or installing as a legitimate applications.
If I were to scan the system with ...
- 359
3
votes
1
answer
11k
views
What does the check mark `Lock document after signing` do in Acrobat Reader?
I need to sign PDF documents with the Acrobat Reader DC (V19, Win10).
What consequences does the check mark Lock document after signing specifically have? This is what I checked/got so far (partly ...
- 10.6k