Code signing (Code signing) is to digitally sign various software code files to confirm the identity of the software publisher and ensure that the software has not been tampered with after signing. It uses digital certificates to identify software publishers and uses hash algorithms to ensure Software Integrity. With the help of PKI encryption technology and digital certificates, the code signing mechanism regulates the release of software and helps developers and end users to establish a safe and trustworthy software release environment and use environment.
Various types of files such as Windows kernel code .sys files, ActiveX files, .exe and .dll files, Java Applets, J2ME MIDlets, Office macro files, etc. all require software code digital signatures. Deploying digital signatures to software code files requires not only code signing certificates, but also code signing tool software to embed digital signatures into software. The two code signing tools to be recommended today are SignTool launched by Microsoft and WoSignCode code signing tool launched by WoSign CA.
1. Microsoft SignTool command line tool
SignTool is a command-line tool provided by Microsoft for digitally signing software code, verifying code signatures and timestamps. This tool is automatically installed when you install Visual Studio and the Windows SDK. To run the tool, use the Visual Studio Command Prompt or the Windows SDK Command Prompt (also known as the CMD Shell). You can use these utilities to easily run tools without navigating to the installation folder. Signtool can only use the command line for code signing, and there is no visual guidance interface, so it is suitable for users who have basic command line usage.
2. WoSignCode code signing tool
WoSignCode code signing tool is a visual code signing tool independently developed by WoSign. It supports executable file signing, application code signing, ActiveX control digital signature and driver digital signature. It has comprehensive functions and is easy to use. The WoSignCode code signing tool has been updated to version V3.0.1.26, and iterative optimization of multiple versions has been carried out to better meet the needs of developers; the visual interface makes code signing more convenient.
Support batch signature;
Support Windows XP and above systems;
Support executable file (exe, dll, sys.ocx, etc.) and packaged file (cab, cat, etc.) signature;
Added cross root to code signing to improve compatibility
CSR encryption bits support 3072 bits