Python에서 디지털 서명을 추가하는 방법

How Digital Signatures Work

Digital signatures use a combination of private and public keys. The private key is used to create the signature and should be kept secure by the signer. The public key, shared with anyone, is used to verify that the corresponding private key made the signature. This is based on public key cryptography, often implemented using algorithms like RSA.

1. Install Python

The first step is to have Python installed on your machine. Python is a versatile programming language that you'll use to write your digital signature scripts. You can download it from the official Python website if you haven't installed Python yet. Ensure you download a version compatible with your operating system (Windows, macOS, or Linux).

2. Code Editor

A good code editor will make writing and testing your Python scripts easier. Choose an editor that you are comfortable with and that supports Python syntax and preferably has integrated terminal support for easy testing and debugging functions.

3. Set Up a Python Development Environment

Having a good development environment can make coding in the Python world much more straightforward. You can use a text editor like Visual Studio Code or Sublime Text or an Integrated Development Environment (IDE) like PyCharm or Jupyter Notebook. These tools provide features like syntax highlighting, code completion, and debugging, which are invaluable when writing and testing code.

4. Install Necessary Libraries

You will need specific libraries for digital signatures in Python, mainly IronPDF. IronPDF is used for working with PDF documents. You can install this library using pip, Python's package installer. Open your command line or terminal and run the following commands:

 pip install ironpdf

5. Generating Cryptographic Keys

You will need a pair of cryptographic keys (private and public keys) to create and verify digital signatures. These can be generated using tools like OpenSSL or Adobe Acrobat Reader to create .pfx or .p12 certificates. Ensure you store these keys securely, as they are crucial for the integrity and security of your digital signatures.

Simple Digital Signature

With IronPDF, signing a PDF can be as straightforward as the following:

from ironpdf import PdfSignature

# Cryptographically sign an existing PDF in 1 line of code!
PdfSignature(r"./certificates/IronSoftware.p12", "123456").SignPdfFile("any.pdf")

from ironpdf import PdfSignature

# Cryptographically sign an existing PDF in 1 line of code!
PdfSignature(r"./certificates/IronSoftware.p12", "123456").SignPdfFile("any.pdf")

In the above code, the PdfSignature function is used with a provided path to a .p12 certificate, and the corresponding password. This function is then called to sign a specified PDF document.

Step 1: Create a PDF

First, you create a PDF document from HTML content using the ChromePdfRenderer class:

from ironpdf import ChromePdfRenderer

# Create a PDF document from HTML content
renderer = ChromePdfRenderer()
doc = renderer.RenderHtmlAsPdf("<h1>Testing 2048 bit digital security</h1>")

from ironpdf import ChromePdfRenderer

# Create a PDF document from HTML content
renderer = ChromePdfRenderer()
doc = renderer.RenderHtmlAsPdf("<h1>Testing 2048 bit digital security</h1>")

Step 2: Create a Signature Object

from ironpdf import PdfSignature

# Initialize the signature object with your .pfx certificate and password
signature = PdfSignature(r"./certificates/IronSoftware.pfx", "123456")

from ironpdf import PdfSignature

# Initialize the signature object with your .pfx certificate and password
signature = PdfSignature(r"./certificates/IronSoftware.pfx", "123456")

# Set additional signing options
signature.SigningContact = "support@ironsoftware.com"
signature.SigningLocation = "Chicago, USA"
signature.SigningReason = "To show how to sign a PDF"

# Set additional signing options
signature.SigningContact = "support@ironsoftware.com"
signature.SigningLocation = "Chicago, USA"
signature.SigningReason = "To show how to sign a PDF"

# Sign the PDF document with the signature
doc.Sign(signature)

# Sign the PDF document with the signature
doc.Sign(signature)

# Save the signed PDF document
doc.SaveAs("signed.pdf")

# Save the signed PDF document
doc.SaveAs("signed.pdf")

Importance

Verification ensures that the document's integrity has not been compromised and the signature is valid. This involves decrypting the hash object of the document with the signer's public key to ensure it matches the expected hash.

Verifying Signatures

To verify a digital signature, you would use the public key associated with the private key used for signing. While the IronPDF library simplifies the signing process, verification typically involves using crypto libraries like pycryptodome to compare the document's hash with the decrypted signature hash. Run the following command to use pycryptodome:

pip install pycryptodome

pip install pycryptodome

Key Security

Always keep your private key secure. If someone else gains access, they could sign documents like you.

Hashing for Integrity

Always hash the data before signing. This ensures that the signature is unique to the document's content.

Verification for Trust

Always verify signatures before trusting a document. This ensures that the document has not been tampered with after signing.