Authenticode

The Microsoft assemblies that you depend on in your managed service are signed with both a strong name signature and an Authenticode signature.

Site Home Paul King - msft 2011

If an Authenticode signature is present, the entire package must be read in order to generate a file hash and compare that against the signed hash.

Site Home Heath Stewart 2011

The reason is that when the CLR loads an assembly which has an Authenticode signature, it tries to verify it by reaching out on the internet to make sure there is a full chain of certificates back to the issuing authority as well as validate the certificate has not been revoked.

Site Home Paul King - msft 2011

Authenticode signatures allow for the identity of the assembliy to be verified by chaining the certificate to a trusted root.

Site Home Paul King - msft 2011

Authenticode is used for signing and checking software under Windows and is meant to verify the origin of software.

Wilders Security Forums 2010

· Authenticode - Codesign your patches with integrated support for Authenticode certificates signing.

Softpedia - Windows - All 2010

This security update resolves two privately reported vulnerabilities in Windows Authenticode Verification that could allow remote code execution.

Megite Technology News: What's Happening Right Now Noreply 2010

Lai said he expects attackers to show intense interest in the Authenticode bugs because exploiting the flaws would allow them to disguise malware as digitally-signed software from the likes of Microsoft.

ARN News 2010

MS10-019 is rated Critical and designed to patch two vulnerabilities in Windows Authenticode Verification.

Softpedia - Windows - All Marius Oiaga 2010

Authenticode is used for signing and checking software under Windows and is meant to verify the origin of software.

Wilders Security Forums 2010