Hello. Sign In
Standards Store




Look Inside

CSA ISO/IEC 17960

2016 Edition, 2016

Complete Document

Information technology - Programming languages, their environments and system software interfaces - Code signing for source code



Detail Summary

Active, Most Current

EN
Additional Comments:
SAME AS ISO/IEC 17960
Format
Details
Price (USD)
Secure PDF
Single User
$70.00
Print
In Stock
$90.00
Add to Cart

Product Details:

  • Revision: 2016 Edition, 2016
  • Published Date: January 2016
  • Status: Active, Most Current
  • Document Language: English
  • Published By: CSA Group (CSA)
  • Page Count: 24
  • ANSI Approved: No
  • DoD Adopted: No

Description / Abstract:

This International Standard specifies a language-neutral and environment-neutral description to define the methodology needed to support the signing of software source code, to enable it to be uniquely identified, and to enable roll-back to signed previous versions. It is intended to be used by originators of software source code and the recipients of their signed source code. This International Standard is designed for transfers of source code among disparate entities.

The following areas are outside the scope of this International Standard:

— Determination of the trust level of a certification authority;

— Format used to track revisions of source code files;

— Digital signing of object or binary code;

— System configuration and resource availability;

— Metadata — This is partially addressed by ISO/IEC 19770-2;

— Transmission and representation issues

— Though this could be an issue in implementation, there are techniques such as Portable Document Format (PDF)1) that can be used to mitigate these issues. This applies in particular to the transmission of digital signatures.
CSA B51