How should I format digital signatures?

Question

I'm working on implementing DSA digital signature algorithm. I understand the algorithm itself, one thing I don't really understand is how should my message look after it was signed?

For example, I have a text file that I'd like to sign and send to someone else. Where should I put the generated keys for verifying the signature, and how should I parse this message to verify the signature?

score 2 · Accepted Answer · edited Oct 07 '21 at 06:09

2

PKCS#7 is your friend.

Update: I forgot to mention, that CMS (Cryptographic Message Syntax) is an evolution of PKCS#7.

edited Oct 07 '21 at 06:09

Community

1
1

answered Jun 06 '11 at 17:14

Eugene Mayevski 'Callback

45,135
8
71
121

score 2 · Answer 2 · answered Jun 06 '11 at 17:29

Eugene's link should answer your question. I will add one thing: Don't expect any actual security from your implementation of DSA. If you want the information secure, use an already-written DSA implementation. When not expertly written, crypto primitives can be terribly insecure.

How should I format digital signatures?

2 Answers2