c++ - How to verify (programmatically) if an exe has been tampered or not? -
context : third party exe tries communicate application. application should ensure third party exe not tampered or modified other owner. both external pe , application runs on same machine , external pe relies on com interface fetch data needs application.
i extent aware sole purpose of signing executable ca certificate ensure authenticity , integrity. have validate certificate of external pe confirm identity. still have following doubts.
1) win-api provides winverifytrust , certverifycertificatechainpolicy functions. both of these functions can used trust verification of executable. difference? in case should function?
2) if use these function verify certificates, possible malicious app can spoof certificates(pose valid exe) or fool other means , connect application?
thanks in advance help.
Comments
Post a Comment