New answers tagged

0 votes

Request/Creating a Code Signing Certificate

A Windows Code Signing Certificate is a good fit for your needs because it allows you to sign software and applications in the Windows environment for both 32- and 64-bit file versions, and once you ...
1 vote

Strip CMS Signature from file (using openssl?)

openssl cms -inform DER -in (file_with_signature) -cmsout -print | sed -n '/eContent/,/certificates/p' | grep -v eContent | grep -v certificates | awk -F' ' '{print $3$4$5$6$7$8$9$10$11$12$13$14$15$16}...
1 vote

e-signature + digital signature aws md5

Is MD5 (checksum) enough to track if the signed document is altered? MD5 is a weak hash vulnerable to practical collision attacks, i.e. an attacker could create two different documents with the same ...
1 vote
Accepted

What is the most secure hardware option for the use of personal eIDAS compliant QES in the EU?

Are such setups available or what is the closest solution? Yes, there are some smartcard readers providing 'Secure Pin Entry', see for instance those at https://www.smartcardfocus.us/shop/ilp/se~6/...
  • 17.9k
0 votes

Is it possible to use WebAuthn for digitally signing documents in the browser?

This is technically possible but doesn't actually provide you the guarantees you're looking for If you're gonna call navigator.credentials.get() all the user will be prompted with is the browser ...
  • 101
4 votes

How to cryptographically guarantee that data came from a trusted application on a mobile device?

No, it's not. Data generated by a client can always be compromised. If the program can be accessed by an attacker, its secrets can be compromised. With the secrets, the attacker can generate data and ...
  • 51.5k

Top 50 recent answers are included