02059nas a2200193   4500008004100000245005400041210005400095260000900149300001400158490000600172520140600178653002201584653003801606653002001644653005301664100001901717700001201736856011701748       2009                        eng d00aSigning digital documents in hostile environments0 aSigning digital documents in hostile environments  c2009  a106 - 1130 v73 aDigital signature is nowadays a consolidated machinery allowing the management of electronic documents with full legal power. In this scenario, digital signature represents thus the key issue on every process of document dematerialization toward which both private and public organizations, as well as simple citizens, are moving quickly. Unfortunately, digital signature suffers from a severe vulnerability, directly deriving from the potential untrustworthiness of the platform where the signature generation process runs, enabling a set of possible dangerous attacks. The basic reason of this vulnerability is that an even secure smart card is anyway a handicapped computer, since it misses I/O devices so that there is no trusted control about the link between the document to sign and the digest received from the smart card. Exploiting such a weakness, the attacker can intrude in order to obtain signed documents with no intention from the subscriber. The problem is inherently unsolvable, provided that the current signature infrastructure, as well as its legal value, are maintained. In this paper we propose a new approach to contrasting the above problem, from which we derive two techniques with different features in terms of efficiency and robustness. The nice feature of our proposal, beside its effectiveness, is that it totally preserves the current software and legal infrastructure.10aDigital signature10aLegal issues in digital signature10aNon-repudiation10aSecurity and identity management in e-activities1 aBuccafurri, F.1 aLax, G.  uhttp://www.scopus.com/inward/record.url?eid=2-s2.0-70350635834&partnerID=40&md5=5181ea4d5763adab38c1aa2e6e360ecb