The service can verify a digital signature over data or a digest submitted by a user with the public half of a managed asymmetric key.
Verify Digital Signature
CCC.KeyMgmt.CP12
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.TH07 | Signing or MAC Key is Used to Authenticate Unauthorized Content | Permission to invoke sign or MAC operations may be granted more broadly than intended, or a signing key may be reachable from a compromised workload. Signatures or authentication codes are then produced over content the key owner did not approve, and verifiers accept that content as genuine. Integrity of the code, tokens, or messages that trust the key is compromised, and the key owner cannot distinguish forged artifacts from legitimate ones. |