that discrepancy between spec & implementation of DSIG hashing (RE: First draft of the ballot comments on the new amendment)

[Hin-Tak Leung]

Hi Ali,

I am sure you are right. Signtool.exe is the command line tool wrapped around window's authenticode/wintrust system for signing and verifying all sorts of things. The actual functionality for signing and verifying fonts is provided by an (optional?) add-on dll, mssipotf.dll . What is the availability of the 64-bit version of this dll?

Hin-Tak

--------------------------------------------
On Tue, 6/9/16, Basit Ali <alib at microsoft.com> wrote:
 
 Hello Hin-Tak, 
 
 Signtool.exe is the
 application used for signing font. This application is
 distributed with Windows SDK. 
 
 Thanks,
 Ali
 
 -----Original Message-----
 From: Hin-Tak Leung [mailto:htl10 at users.sourceforge.net]
 
 Sent: Saturday, September 3, 2016 4:28
 PM
 To: VladimirLevantovsky <vladimir.levantovsky at monotype.com>;
 Greg Hitchcock <gregh at microsoft.com>
 Cc: mpeg-OTspec at yahoogroups.com;
 Typography Site Comments <mstwsite at microsoft.com>
 Subject: RE: that discrepancy between spec
 & implementation of DSIG hashing (RE: First draft of the
 ballot comments on the new amendment)
 
 Hi Greg,
 
 It
 has been a while - have you had a chance to have a look at
 the code to confirm the discrepancy yet? Seeing as there is
 another ballot for amendment...
 
 Also, a somewhat related issue - what's the
 availability of the 64-bit version of the MS signing tool? I
 read that it exists, but the last time I checked the
 publicly available download is still the decade-old 32-bit
 version.
 
 Hin-Tak
 
 --------------------------------------------
 On Mon, 23/5/16, Greg Hitchcock <gregh at microsoft.com>
 wrote:
  
  Sorry, I've
 not had a
  chance to look at this code
 yet.
  
  GregH