to verify the signatures. Ensure that the implementation does not contain CWE-295,
CWE-320, CWE-347, and related weaknesses.
Use code signing technologies such as Authenticode. See references [R.494.1] [R.494.2]
[R.494.3].