How do I verify the digital signature of an image from the WDM driver?

Question

I need to verify the digital signatures of downloaded images (dll, exe), if the image does not have a specific signature, it is necessary to reject its download. How can I do this? Are there functions for verifying digital signatures? Both a complete answer and partial information on the question will be useful.

WinVerifyTrust() is user space API – Baget Sep 06 '21 at 14:29 — Baget, Sep 06 '21 at 14:29

score 1 · Accepted Answer · answered Sep 06 '21 at 14:34

1

There is no public API by Microsoft, you have two options:

Use undocumented API - there is sample here
Implement your own test, by reading the image and check signature using CNG Kernel API (BCrypt)

answered Sep 06 '21 at 14:34

Baget

3,318
1
24
44

How do I verify the digital signature of an image from the WDM driver?

1 Answers1