Digital signature
- Term
- Digital signature
- Exam
- CISA & CISM
- Definition
A value created with the sender's private key that proves origin and integrity.
- Explained
A digital signature is created with the sender's private key over a hash of the message. Anyone with the public key can verify origin and integrity, which provides non-repudiation, but the message itself is not hidden.
- In practice
A contract PDF signed with the sender's private key; anyone with the public key can verify it.
- Often confused with
- Encryption
- Exam angle
Provides non-repudiation, not confidentiality.
- Related