WindowsAuthenticodePortableExecutableSignatureFormat摘要.docxVIP

Windows Authenticode Portable Executable Signature FormatVersion 1.0— March 21, 2008?AbstractAuthenticode? is a digital signature format that is used to determine the origin and integrity of software binaries. Authenticode is based on Public-Key Cryptography Standards (PKCS)?#7 signed data and X.509 certificates to bind an Authenticode-signed binary to the identity of a software publisher. This paper contains the structure and technical details of the Authenticode signature format.This paper does not discuss issuing or processing X.509 code signing certificates, use of Windows Software Development Kit tools to sign binaries, deployment of a code signing infrastructure, or related Windows? APIs. Information on these topics is available in ”Resources” at the end of this paper.This information applies for the following operating systems:Windows Server? 2008Windows Vista?Windows Server 2003Windows? XPWindows 2000References and resources discussed here are listed at the end of this paper.For the latest information, see: /whdc/winlogo/drvsign/Authenticode_PE.mspxLICENSE AGREEMENTMicrosoft Windows?Authenticode? Portable Executable Signature Format SpecificationRevision 1.0Note: This specification is provided to aid in the development of certain development tools for the Microsoft Windows platform. However, Microsoft does not guarantee that it is a complete specification in all respects, and cannot guarantee the accuracy of any information presented after the date of publication. Microsoft reserves the right to alter this specification without notice.Microsoft will grant a royalty-free license, under reasonable and non-discriminatory terms and conditions, to any Microsoft patent claims (if any exist) that Microsoft deems necessary for the limited purpose of use in software tools to generate digital signatures and in EFI firmware to verify the signatures, each exclusively in Portable Executable and Common Object File Format images. Complying with all applicable copyright law