Tag
code-signing
- May 23, 2026 Signature Verification and Where the Root Key Lives How a constrained bootloader verifies an image signature, which algorithms fit in its budget, and why storing the public key in flash defeats the purpose. embedded systems
- Jan 8, 2026 The APK Signing Block and Whole-File Digest Verification How the v2 signature sits between the ZIP entries and the central directory, how a digest covers a file that contains the digest, and why JAR signing could not do this. mobile computing
- Apr 18, 2024 Certificate, Profile, and Entitlement Binding in iOS Code Signing How a provisioning profile licenses one signing identity to assert a specific set of entitlements, and why the kernel rejects an app whose entitlements exceed its profile. mobile computing
- Feb 8, 2024 Mach-O Load Commands and the Segments a dyld Image Is Built From How the Mach-O header addresses its command list, why __PAGEZERO occupies the low address space, and how chained fixups replaced the older rebase and bind opcode streams. systems programming
- Oct 18, 2023 Signing Key Rotation and the Proof-of-Rotation Lineage How a new signing key proves continuity with the old one, why the lineage is a linked list of cross-signed certificates, and what a device that has never seen the old key must be told. mobile computing
- Apr 21, 2023 Code Signing and Entitlement Enforcement at Load Time What a signature actually covers on a mobile binary, how the kernel or loader checks it before the first instruction, and what an entitlement grants that a file mode cannot. mobile computing