|
Developer
Downloads
Tutorial
Licensing
Mac
OS X
Success Stories
|

|
Electronic signature
software articles,
schemes
all have several prior requirements without which no such signature can
mean anything, whatever the
cryptographic theory or
legal provision.
|
- First, quality algorithms.
Electronic signature software articles, Some public key algorithms
are known to be insecure, practicable attacks against them having been
identified.
- Second, quality implementations. An
implementation of a good algorithm (or protocol) with mistake(s) will
not work.
- Third, the private key must remain
actually secret; if it becomes known to some other party, that party
can produce perfect
digital
signatures of anything whatsoever.
- Fourth, distribution of public keys
must be done in such a way that the public key claimed to belong to
Bob actually belongs to Bob, and vice versa. This is commonly done
using a public key infrastructure and the public key-user association
is attested by the operator of the PKI (called a
certificate
authority) Electronic signature software articles. For
'open' PKIs in which anyone can request such an attestation
(universally embodied in an identity certificate), the possibility of
mistake is non trivial. Commercial PKI operators have suffered several
publicly known problems. Such mistakes could lead to falsely signed,
and thus wrongly attributed, documents.
- Fifth, users (and their software)
must carry out the signature protocol properly. - Electronic
signature software articles.
|
Electronic signature
software articles and digital signature guidelines.
|
Electronic signature software articles are a set of guidelines
published on 1 August 1996 by the American Bar Association (ABA) Section
of Science and Technology Law. The authors are members of the Section's
Information Security Committee. The document was the first overview of
principles and a framework for the use of
digital signatures
and authentication in electronic commerce from a legal viewpoint,
including technologies such as certificate authorities and public key
infrastructure (PKI). The guidelines were a product of a four-year
collaboration by 70 lawyers and technical experts from a dozen
countries, and have been adopted as the model for legislation by some
states in the US, including Florida and Utah, Electronic signature
software articles.
|
|