The service can generate a digital signature over data or a digest submitted by a user with a managed asymmetric key.
Create Digital Signature
CCC.KeyMgmt.CP11
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.TH07 | Signing or MAC Key is Used to Authenticate Unauthorized Content | Permission to invoke sign or MAC operations may be granted more broadly than intended, or a signing key may be reachable from a compromised workload. Signatures or authentication codes are then produced over content the key owner did not approve, and verifiers accept that content as genuine. Integrity of the code, tokens, or messages that trust the key is compromised, and the key owner cannot distinguish forged artifacts from legitimate ones. |
| CCC.KeyMgmt.TH08 | A Single Key is Used for Multiple Cryptographic Purposes | A key may be created without a usage restriction, or with a restriction that permits both encryption and signing operations. The same key material is then exposed through two different cryptographic protocols, enabling cross-protocol attacks in which an oracle from one operation reveals information about the other. Confidentiality of data encrypted with the key and integrity of signatures produced with it are both weakened. |