Can you sign a NativeAOT module with a strong name?

[slxdy]

I do not have a key yet, but I'd like to ask this before getting one.

[jkotas]

Strong name signing is specific to managed IL file format. Published native AOT binaries do not use the IL file format, so it is not possible to sign them with a strong name.

[slxdy]

Well, how would I sign my executable after NativeAOT then?

[MichalStrehovsky]

On Windows: https://learn.microsoft.com/en-us/windows/win32/appxpkg/how-to-sign-a-package-using-signtool
On Mac: https://developer.apple.com/library/archive/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html

I don't know if there is anything like that on Linux.

[hez2010]

Instead of signing the assembly, in NativeAOT what you need to do is to sign the executable file.

[jkotas]

Yes - it depends on what you are trying to achieve by the signing.

[MichalStrehovsky]

If it's Authenticode signing, that one should work. We ship several binaries compiled with Native AOT in .NET 8 that are Authenticode signed.