What is Authenticode

[Lawford]

Hi all,

I am a software developer and already know that Microsoft Windows and web browsers such as Internet Explorer and Mozilla Firefox use a technology called authentication to verify the publisher of downloads and check that they have not been infected by a virus since they were created. But i found that the new term called Authenticode. What it is exactly. Please define. Thanks in advance.

[Steve123]

Authenticode is a technology that uses digital certificates to recognize the author or publisher of program code and hashing algorithms to make sure its honesty. It is based on industry standards as well as Public Key Cryptography Standards (PKCS) #7 that is encrypted key specification, PKCS #10 that so certificate request formats, X.509 that is certificate specification and the Secure Hash Algorithm in short form SHA and Message Digest 5 hash algorithms. It is a exact completion of a type of technology that one-time in use for best part of a combine of decades. Check and reply.

[Big Fish]

Digital signatures are shaped using a public key signature algorithm. This uses two different keys:a public key and a private key, called a "key pair." The private key is recognized only to its proprietor and must be reserved secure, while the public key is complete available to anyone. Without leaving into details, the way the algorithm works is that if one key is used for encryption, the additional must be used for decryption, as it is unreasonable to calculate the decryption key from the encryption key. In a digital signature, the private key is use to make the signature and the public key is used to authenticate it. Best of luck.

[Snake08]

The way the Authenticode process works is fundamentally this:
# The code signing software generates a one way hash or message digest of the software.
# It encrypts this hash by the publisher's private key.
# The encrypted hash and the publisher's digital certificate that including the public key are insert into the software, signing it.
Check and reply.

[Milton.J]

The Authenticode signature confirmation process works like as :
# The user's computer make a one way hash or message digest of the software.
# It decrypts the encrypted hash by the publisher's public key from the digital certificate.
# It evaluate the results - if they equal then the signature is valid and the software has not been tamper with.

[Spyrus]

It is likely to make your own Authenticode digital certificate that can be use to verify that your programs have not been customized since you signed them. Microsoft's code signing tools contain utilities that allow you to create software publishing certificates. But as you could make a certificate that claim you were anyone still Microsoft Corporation such a certificate would not be trusted by the Windows operating system or by web browsers. Check and reply.