Updating signature algorithms for strong name binding

A method for validating the identity of an assembly that has an updated strong name, the method comprising:

• receiving an assembly, the assembly having an identity comprising an identifier of the assembly and an identity public key of an identity public/private key pair, the assembly having an updated strong name comprising a digital signature of a cryptographic digest of the contents of the assembly using a signature private key of a signature public/private key pair;
• verifying the identity of the assembly by:
• extracting the identity public key from the identity of the assembly and a counter signature from the assembly, the counter signature comprising the signature public key and a digital signature of the signature public key using the identity private key;
• using the identity public key to verify that the digital signature of the signature public key was generated using the identity private key;
• after verifying that the digital signature of the signature public key was generated using the identity private key, decrypting the digital signature of the cryptographic digest of the contents of the assembly using the signature public key;
• creating a cryptographic digest of the contents of the assembly;
• comparing the created cryptographic digest to the decrypted cryptographic digest;
• and
• validating the identity of the assembly upon determining that the created cryptographic digest is the same as the decrypted cryptographic digest.

A framework, comprising computer executable instructions stored on one or more computer storage devices, which, when executed, use an updated signature key to sign an assembly with a strong name without modifying the identity of the assembly after the assembly has been released for use within a runtime by:

• receiving an assembly;
• signing the assembly with a strong name using an identity public/private key pair by:
• assigning an identity to the assembly, the identity comprising an identifier of the assembly and the identity public key;
• creating a cryptographic digest of the contents of the assembly;
• creating a digital signature of the cryptographic digest using the identity private key;
• storing the identity and the digital signature in the assembly;
• releasing the assembly with the assigned strong name;
• signing the assembly with an updated strong name using a signature public/private key pair without modifying the identity of the assembly by:
• creating an updated digital signature of the cryptographic digest of the assembly using the signature private key;
• creating a counter signature for the assembly that includes the signature public key and a digital signature of the signature public key using the identity private key;
• and
• storing within the assembly the identity, the updated digital signature of the cryptographic digest, and the counter signature;
• and
• releasing the assembly with the updated strong name.