Overview#
Signature Verification is a Cryptographic Primitive which is typically an Digital Signature Algorithm that can verify the message representative from the Digital Signature representative under the control of the corresponding Public Key.Signature Verification is paired in the Digital Signature Algorithm with a Signature Generation which created the Digital Signature.
Signature Verification requires:
- Public Key
- Digital Signature ( the hash of the message)
- message - The Original message
Signature Verification How To#
Signature Verification is performed by the Recipient:- using the signer's Public Key to decrypt the Digital Signature
- uses the same One-Way Hash Function that generated the original hash to generate a new one-way hash of the same message
- the recipient compares hash snet form the signer with the generated hash
If the hashes match, the recipient has Assurance that:
- Integrity - the message may have been tampered with since it was first signed
- Non-Repudiation - the Public Key used to decrypt the Digital Signature corresponds to the Private Key used to create the Digital Signature.
- Authentication - confirming the identity of the signer also requires some way of confirming that the Public Key truly belongs to a particular person or other entity.