ISO/IEC INTERNATIONAL STANDARD 17960 First edition 2015-09-01 Information technology Programming languages, their environments and system software interfaces Code signing for source code Technologies de I'information - Langages de programmation, leur environnement et interfaces des logiciels de systemes - Signature numerique pour le code source Reference number ISO/IEC 17960:2015(E) IE( International Organization for Standardization dardization5956617 @IS0/IEC2015 IS0/IEC 17960:2015(E) COPYRIGHTPROTECTEDDOCUMENT IS0/IEC 2015, Published in Switzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form written permission. Permission can be requested from either ISO at the address below or ISO's member body in the country of the requester. ISOcopyrightoffice Ch. de Blandonnet 8 . CP 401 CH-1214 Vernier, Geneva, Switzerland Tel.+41 22 749 01 11 Fax +41 22 749 09 47 [email protected] www.iso.org Intenatinair PrganizationforStandardization icene-zZhejag nsite f standareRalS S6JEC 2015 - All rights reserved Not for Resale, 2015/11/11 09:06:33 etworking permitted without license from IHS IS0/IEC 17960:2015(E) Contents Page Foreword ..iv Introduction. ... 1 Scope. 2 Conformance 3 Normative references 4 Terms and definitions ..2 5 Concepts ..3 6 Requirements ..4 6.1 General ..4 6.2 Certificates 4 6.3 Hash code. .5 6.4 .5 Initial code signing. 6.5 Modifying signed previous versions .5 6.6 Revision format. .5 Annex A (informative) Notional code signing process ..6 Bibliography iii see=Zhejiang Institute of Standardization 5956617 vided by IHS under I ed without license from IHS Not for Resale, 2015/11/11 09:06:33