Signature Verification

Design and Implementation of ELF File Signature Verification Mechanism in Linux Kernel (C/C++ Code Implementation)

by
Design and Implementation of ELF File Signature Verification Mechanism in Linux Kernel (C/C++ Code Implementation)

1. Introduction: Why is ELF Signature Verification Needed? In Linux systems, ELF (Executable and Linkable Format) is the core format for executable files and shared libraries. By default, the kernel only checks the format validity of ELF files (such as magic number and architecture matching), without verifying the integrity and legitimacy of the file’s source— … Read more

Signature Verification in Embedded Systems: Design and Principle Analysis (C/C++ Implementation)

by
Signature Verification in Embedded Systems: Design and Principle Analysis (C/C++ Implementation)

In embedded systems, the integrity and legitimacy of firmware are crucial. For example, if the bootloader of a smart device loads tampered firmware, it may lead to system crashes or even the injection of malicious code. The “vboot” system of Chrome OS provides a lightweight and efficient signature verification scheme, the core logic of which … Read more

The Pitfalls of Login Functionality: How an HTTP Redirection Attack Almost Cost My Company (with Solutions)

by
The Pitfalls of Login Functionality: How an HTTP Redirection Attack Almost Cost My Company (with Solutions)

Follow our public account for Java insightsTimely delivery Last week, I made a blunder at the company—my own login module almost became an accomplice to a phishing site. Today, I want to share this thrilling process and how to avoid the “invisible bomb” of HTTP redirection attacks. The Morning That Drove the Tester Crazy It … Read more