In short
A digital signature is created with the signer's private key and verified with the signer's public key. It proves who signed a document (authentication and non-repudiation) and that it hasn't changed (integrity).
Key takeaways
- It doesn't by itself keep the document confidential.
- Digital certificates from a certificate authority link a public key to its owner.
- It is different from an electronic image of a handwritten signature.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A sender adds a digital signature to a contract. Which key does the sender use to create the signature, and which does the recipient use to verify it?