Welcome to MSDN Blogs Sign in | Join | Help

Browse by Tags

All Tags » Cryptography » StrongName   (RSS)

The Difference Between the Strong Name Hash and Hash Evidence

The System.Security.Policy.Hash class allows you to make security decisions based upon the hash of an assembly using the HashMembershipCondition . That sounds awfully similar to how strong names are calculated ... According to ECMA partition II section

Public Key Tokens

Time for another visit to the managed strong name API; this time lets take a look at public key tokens. If we want to calculate a token, the strong name API provides two functions that we can use. We've already covered the first, StrongNameTokenFromAssemblyEx
Posted by shawnfa | 0 Comments

A Few Observations about Raw Signatures

Finishing up this week's strong name theme, here's a few observations to make about the raw signatures that we figured out how to dump on Wednesday : You can figure out the size of the key used to sign an assembly based upon the size of the signature
Posted by shawnfa | 3 Comments

Finding the Raw Strong Name Signature

Wow ... there's been lots of interest in signatures lately :-) In response to my last post about reserving a larger section of the PE file for the signature when you create a signature with a larger key, William wants to know if you can extract the actual

What Happens When You Sign With A Larger Key

In response to last Friday's post about creating a key that's longer than 1024 bits, Nicole wondered if anyone had tried doing this, and what the results might be. I just created a 16,384 bit key on beta 1 of the framework (confirming Eugene's time estimate
Posted by shawnfa | 5 Comments

Generating Larger Keys with SN

A while back, I wrote about using the StrongNameKeyGenEx API to generate keys to sign assemblies with. That API lets you pass in a dwKeySize parameter to specify the number of bits to generate in the key. If you're calling the API from your own code,
Posted by shawnfa | 13 Comments

Managed StrongName Refactoring Complete

I've completed refactoring the Managed StrongName project , and I've uploaded the new sources. The changes I made were all pretty much what I laid out in the previous post. We now have two modules built, msn.exe which is a thin wrapper around MS.StrongName.dll
Posted by shawnfa | 2 Comments

The Return of ManagedStrongName: Key Containers

(updated 12/3/04, pointed to the newly refactored source ) It's been nearly two months since the last update to my managed sn.exe port , so its long-past overdue for some new features. This update implements the various key container features that are
Posted by shawnfa | 0 Comments

Post Build Assembly Modification Or: Why Won't SN -Vr Work on Tampered Assemblies

A while back I wrote about delay signing an assembly, and using SN -Vr to register that assembly to have its signature verification skipped. However, some people have noticed that SN -Vr doesn't work if you fully sign an assembly and then tamper with
Posted by shawnfa | 1 Comments

Generating StrongName Keys

(updated 12/03/04 to point to refactored code ) Generating Keys It's been just under a month since I've updated the Managed StrongName API , so here's the next set of APIs. This time, I've setup the APIs needed to create a new key suitable for signing.
Posted by shawnfa | 3 Comments

Managed Strong Names: Verification and the msn.exe tool

(Updated 12/03/2004 to point to refactored code .. see that article for a more accurate description of the current structure of the project) I've posted the first bit of code for the managed strong name implementation . So far, it only does strong name
Posted by shawnfa | 1 Comments

Managed StrongName API

About a week ago, I wrote about verifying strong name signatures from managed code . There are also several other strong name APIs exposed to unmanged code that don't have any managed equivilent, so I thought it might be a good idea to turn that post
Posted by shawnfa | 5 Comments
Filed under: ,

What's the Deal with the ECMA Key?

The libraries laid out in the ECMA spec are all signed with a public key that looks pretty strange. If you ildasm mscorlib.dll, System.dll, or any of the other framework libraries that are defined in the ECMA specs (see partition IV: Library if you're

Ivan Writes about Strong Name Signing with Smart Cards

Ivan's written a new article , showing how to use keys stored on a smart card to strong name sign an assembly. Worth a read if you've ever wondered how this might be done, or wanted a more secure method than using .snk files.
Posted by shawnfa | 0 Comments

Delay Signing

Most people know about the delay signing feature of the CLR. (For those who don't check out MSDN's Delay Signing an Assembly for more details). Basically, delay signing allows a developer to add the public key token to an assembly, without having access
 
Page view tracker