U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

White Paper

Security Considerations for Code Signing

Date Published: January 26, 2018

Author(s)

David Cooper (NIST), Andrew Regenscheid (NIST), Murugiah Souppaya (NIST), Christopher Bean (NSA), Michael Boyle (NSA), Dorothy Cooley (NSA), Michael Jenkins (NSA)

Abstract

Keywords

application container; code signing; digital signature; firmware; mobile application; operating system; software update
Control Families

System and Information Integrity

Documentation

Publication:
White Paper (DOI)

Supplemental Material:
Local Download (pdf)

Related NIST Publications:
ITL Bulletin

Document History:
01/26/18: White Paper (Final)

Topics

Security and Privacy
digital signatures

Technologies
mobile; operating systems