You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pdfbox.apache.org by "Ralf Hauser (Jira)" <ji...@apache.org> on 2021/01/03 09:18:00 UTC
[jira] [Updated] (PDFBOX-5066) ShowSignature: say which digest
algorithm was used, detect forged content
[ https://issues.apache.org/jira/browse/PDFBOX-5066?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ralf Hauser updated PDFBOX-5066:
--------------------------------
Description:
1) SHA256 is was used by the signer to get the content digests of target/pdfs/notCertified_368835_Sig_en_201026090509.pdf , this should be mentioned like
System.out.println("Signature found");
so maybe
System.out.println("Signature algorithm: "+algo);
where 'algo' is for example "sha256WithRSAEncryption" (as per [http://oidref.com/1.2.840.113549.1.1.11])
2) for subFilter="adbe.x509.rsa_sha1" it is not detected, if the pdf content is altered.
was:
1) SHA256 is was used by the signer to get the content digests of target/pdfs/notCertified_368835_Sig_en_201026090509.pdf , this should be mentioned like
System.out.println("Signature found");
so maybe
System.out.println("Signature algorithm: "+algo);
where also is for example "sha256WithRSAEncryption" (as per http://oidref.com/1.2.840.113549.1.1.11)
2) for subFilter="adbe.x509.rsa_sha1" it is not detected, if the pdf content is altered.
> ShowSignature: say which digest algorithm was used, detect forged content
> -------------------------------------------------------------------------
>
> Key: PDFBOX-5066
> URL: https://issues.apache.org/jira/browse/PDFBOX-5066
> Project: PDFBox
> Issue Type: Improvement
> Components: Signing
> Affects Versions: 2.0.23
> Reporter: Ralf Hauser
> Priority: Minor
>
> 1) SHA256 is was used by the signer to get the content digests of target/pdfs/notCertified_368835_Sig_en_201026090509.pdf , this should be mentioned like
> System.out.println("Signature found");
> so maybe
> System.out.println("Signature algorithm: "+algo);
> where 'algo' is for example "sha256WithRSAEncryption" (as per [http://oidref.com/1.2.840.113549.1.1.11])
> 2) for subFilter="adbe.x509.rsa_sha1" it is not detected, if the pdf content is altered.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org