Re: [GIT PULL] Load keys from signed PE binaries

Matthew Garrett
2013-02-21T18:25:18Z

I don't think that's a problem. Just put the original binary hash in the
certificate before signing it, and extend the X.509 parser to refuse
certificates that have a tag that's present in dbx.

--
Matthew Garrett | mjg59@srcf.ucam.org