Tag
apk-signing
- Jan 8, 2026 The APK Signing Block and Whole-File Digest Verification How the v2 signature sits between the ZIP entries and the central directory, how a digest covers a file that contains the digest, and why JAR signing could not do this. mobile computing
- Oct 18, 2023 Signing Key Rotation and the Proof-of-Rotation Lineage How a new signing key proves continuity with the old one, why the lineage is a linked list of cross-signed certificates, and what a device that has never seen the old key must be told. mobile computing