internally signed JPEG files
Sascha René Leib
sascha.leib@web.de
Sun Apr 13 14:27:03 2003
Hello all,
sorry if this has been discussed here already, I am new to this list,
but before I spend my weekend coding I rather ask if somebody has
already done this before.. :-)
I am planning to add a GPG/PGP signature to a JPEG file. However, the
usual procedure of posting a hash key with the file does not appear
very user-friendly to me, that's why I would rather like to go another
way. In short:
- create a signature for the JPEG-Data stream
- insert this signature in a new marker segment in the JPEG file.
Since JPEG viewers should ignore unknown marker segments, this should
not affect average end-users who can still view them conveniently in
their web browsers, etc. For interested viewers, it should be easy to
verify the origin and integrity of the file using a yet-to-write tool,
or potentially even browser plugins.
Do you know if anyone has already taken some efforts into this
direction, or do you know anything I ought to know?
Best greetings
/sascha
PS: of course, the same should also work with other "tagged" file
formats, e.g. from the IFF-family (TIFF, ILBM, AIFF,...)