thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Code Signing

Digitally signing software so users and systems can verify its publisher and that it has not been modified.

Definition

The publisher signs a hash of the code with a private key tied to a code-signing certificate; verifiers check the signature and certificate chain. Since 2023, CA/Browser Forum rules require code-signing private keys to be stored in hardware (HSMs or tokens). Signing proves origin and integrity, not that the code is safe.

Example

Windows checks the Authenticode signature on an installer before showing the publisher name.

Exam tip

Signing does not prove code is secure; stolen signing keys have been used to sign malware.

Related terms