I want to send my application to different servers/terminals with content integrity and confidentiality.
So, I need to some process to sign my code and application before sending it to servers and to ensure that the software comes from a trusted source and has not been altered.
What do you suggest? What are the most common practices?
For example, use a symmetric key to encrypt the code and a public key to protect the symmetric key and hash of package?