A digital signature (not to be confused with a digital certificate) is an electronic signature that is used to authenticate the identity of a message sender or document signer, and usually to ensure that the original message/document content is unchanged (document integrity).

learn more… | top users | synonyms (1)

0
votes
2answers
253 views

Untraceable Digital Cash?

I have read some articles regarding digital cash that is untraceable (Here). Their protocol is provided below Withdrawal: Alice creates an electronic coin and blinds it. Alice sends the ...
2
votes
1answer
1k views

ADFS: Verify requests from relying party

In ADFS, serveral certificates are used. This is explained (very clearly) on this page: ...
2
votes
1answer
342 views

How does signing work with Elliptic Curve Crypto?

So I have read up and have a decent understanding of how the crypto works with Elliptic Curve Cryptography. I also think I have an understanding of how signing works with things like Elliptic Curve ...
1
vote
1answer
26 views

Is there a way to sign a 624 bits message on 256 bits

I'm looking for a way to sign a 624 bits message on 256bits (sig length = 256 bits) with an asymmetric keys system? I'm trying to sign a qrcode so a client can be sure that this qrcode has been ...
1
vote
1answer
41 views

Advantage of Group signing over single signing

As i known signing is used to ensure integrity and authenticity of sender. What is the advantage of group digital signing over individual signing. Can anyone explain using a scenario?
2
votes
0answers
25 views

CMS/PKCS#7: specifying signatureAlgorithm with digest?

I'm confused about algorithm selection for Cryptographic Message Syntax (a.k.a. CMS, PKCS#7) signed objects (RFC5652 Section 5.1). The SignerInfo structure (RFC5652 Section 5.3) has two separate ...
1
vote
0answers
45 views

How can I sign an rpm package using a smart card?

I have a smart card (not OpenPGP card), and I am preparing to sign an rpm using this card. After signing, I will get two files: my.rpm.sig, and my_id.cer. How can I sign my rpm using these extra ...
1
vote
0answers
99 views

PKCS#7 signed data structure in signed PDF document

Is it mandatory to include PKCS#7 data (OID 1.2.840.113549.1.7.1) octet string into the sequence of PKCS#7 signed data? I mean if you want to sign PDF, you are basically adding PKCS#7 container ...
1
vote
0answers
62 views

Verifying the owner of a signing key

I'm using elliptic curve cryptography (curve25519 and ed25519) for key exchange and signing. The signing and key exchange keypairs are independent. I need two users to be able to verify each other's ...
1
vote
0answers
210 views

Digital signature based authentication schema using two passwords

I'm working on an authentication system for a web based Bitcoin-related service. As part of the service, users do some less sensitive operations (mostly reading and sending various types of ...
1
vote
0answers
59 views

Is the digital declaration just an obscure proposal?

One professor from my university proposed me and some colleagues to work on a paper about the digital declaration (which is supposed to be better than the digital signature) for passing the subject. ...
1
vote
0answers
361 views

Implementing OAuth flow in JavaScript

I am making a custom auth flow for the application. It is inspired by OAuth 2.0. Dev sends user to an auth page on my domain, passing callback_url and api_id. I redirect user to callback_url, passing ...
1
vote
0answers
111 views

Techniques for web-user communication across an untrusted server

I'm designing a web-based notification framework (i.e. a user can subscribe to updates from a service or another user) where communication between users is encrypted. User-to-user communication on ...
0
votes
0answers
44 views

Guidance on Login using Digital Signature DSC (PKCS12 and x509 certificate)

I'm interesting in exploring possibility to authenticate user using their Digital Certificate. The methodology is to first register the DSC from the user and keep their Public key along with Serial ...
0
votes
0answers
21 views

Does this show the proper results for signing an XML file

I did the following use this (sign) and this (verify) example on MSDN. Here are the results of all this (don't worry, I will delete the below key and generate new keys, on a different system); XML ...
0
votes
0answers
272 views

Application Privilege Control in Kaspersky blocks program with no digital signature

I made a small application that displays hello world to the console output and attempted to open it in another computer that had Kaspersky fully updated. When I ran the application, Kaspersky gave a ...
0
votes
0answers
25 views

Installer digital signature timestamp inconsistency

I just noticed that the digital signature on an old installer EXE is expired (it's LibreOffice from May 2013, and I'm pretty sure it was valid when I installed it). Investigating further, the time ...
0
votes
0answers
87 views

What curve and key length to use in ECDSA with BouncyCastle

I'm developing a client/server system in Java which is not interacting with third party software, so I don't have to worry about compatibility. At a certain point, I need the client and server to ...