What role does PKI play in code signing?
Code signing is a form of PKI, used in both development and production environments. PKI stands for “Public Key Infrastructure.” It is a security framework that facilitates the safe exchange of information using the principles of encryption, authentication and integrity.
The framework involves cryptographic keys (public-private key pairs), digital certificates and a third-party identity verifier, known as a Certificate Authority (CA). The keys secure data by working in tandem. The public key is used to encrypt the data, and the data can only be decrypted by the private key that matches with the public key.
PKI has been trusted for decades to secure everything from networks and websites to email and users.
