java - How to ensure that file is created by me? -


sometimes java program needs send .dll or .so file client computer remote machine. there possibility ensure .dll (.so) file created me , not hacker? firstly, thought digital signature (java.security package) first choice, cannot verify signature in remote machine, because java may not available there. there other choices?

what trying achieve knowing non repudiation. is:

  • a service provides proof of integrity (nobody has modified file) , origin of data (you genuine creator of file).
  • an authentication can asserted genuine high assurance.

it's not java or c# or language itself, it's concept doesn't depends on programming language using. every language has it's own classes, libraries, mecanisms... dealing that, in better or easier way others.

specifically in java, can start taking here. steps need:

  • generate pair of keys (only done once).
  • sign every document create on client side (that ensures nobody can change it, nobody can take it's ownership , nobody can refuse ownership of file).
  • send document , it's signature.
  • on server side, verify validity of signature against provided document.

if want check if file hasn't been modified can use simple digest mecanism without signing, creating hash (don't need create certificates, validate signature...) , verify later work, aware hash, can't check author of file, file hasn't been modified since it's hash creation.


Comments

Popular posts from this blog

Command prompt result in label. Python 2.7 -

javascript - How do I use URL parameters to change link href on page? -

amazon web services - AWS Route53 Trying To Get Site To Resolve To www -