← Back to glossary
✅

Code Signing

Security

Malware Secure Boot Digital Signature Supply‑chain Attack

Use of digital signatures to authenticate software publishers and ensure integrity of executables and updates.

Definition

Code signing uses certificates and signatures to prove publisher identity and integrity. Trust depends on protected signing keys, certificate management, and verification by the platform.

In plain English Use of digital signatures to authenticate software publishers and ensure integrity of executables and updates.

Why this matters

Why it matters: Compromised signing keys can enable large-scale malware distribution; strong controls are essential.

Example

Example: Use hardware security modules for signing keys, enforce multi-party approvals, and monitor for anomalous signing activity.