| MCSign is "one click" a signing tool. In MCSign the algorithm for producing digitale signatures is fix implemented. The password for the digital signature will be received from the smartcard or the removeable storage medium (i.e. a Flash disk). The signing procedure generates the Message Authentication Code (MAC) from a file. This
is then stored in the signature file. During the verification procedure the
MAC in the signature file will be comared with the MAC, which is calculated from the
received file. If these two MAC values are identical then the signature
of the file is valid.
MCSign implements a symmetrical form of the digital signature, contrary
to for example PGP.
This means that one needs the same key for the production and verification
of the digital signature. Thereby signed files can be verified only
by persons, for whom these files are intended. PGP is a Public Key
Cryptography technique and therefore it is asymmetrical.
MCSign produces a high secure digital signature of files or folders. The authenticity (Source of the data is the one that is set), the integrity (unmanipulated data) and the irrevocability (Agreement/contract are not deniable) of signed files can be guaranteed with the digital signature.
The digital signature contains the following data:
File name
Original folder of the file
File size
Date and time of the last change of the file
Message Authentication Code
Name of the computer system
Name of the logged in user
Date and time of the signature
Name of the Signer
This serves to the authentication of the user and the signature.
Restrictions
1. MCSign can be applied only to one file at the same time.
2. MCSign uses a firmly implemented, not selectable algorithm.
3. MCSign uses a random selected key received from the smartcard (or removeable storage medium). This key is not user selectable.
4. MCSign cannot verify the generated signatures.
Related Content:
• MCVerify
• MCWipe
• MCCrypt Pro
• MCCrypt Lite
|