Re:PDF processing and analysis with open-source tools
by POPOSYS on Monday October 10, 2022 @12:48AM
(#33147882)
Also a simple tool to check signatures, if they are valid etc.
[ Parent
| on HN ]
Re:PDF processing and analysis with open-source tools
by POPOSYS on Monday October 10, 2022 @07:54AM
(#33150233)
BTW pdfsig from the poppler tools is mentioned in the list of tools.
Re:PDF processing and analysis with open-source tools
by oever on Monday October 10, 2022 @08:38AM
(#33150563)
Okular has recently gotten improved support for verifying cryptographic signatures in PDF files.
https://tsdgeos.blogspot.com/2022/03/okular-signature-suppor...
Re:PDF processing and analysis with open-source tools
by gettalong on Monday October 10, 2022 @11:11AM
(#33152353)
Verifying digital signatures is quite hard. Yeah, checking whether the stored hash is valid is simple but all the other things are hard, for example, whether the additions done to a signed PDF are actually allowed or not.
Or whether the signature is correct in all the small details, e.g. used algorithm, the included information.
And then it sometimes depends on the environment. For example, sometimes a digital signature is only considered valid if all the revocation information and all the certificates are included in the PDF.