Digital signature

A digital signature is a mathematical scheme for verifying the authenticity of digital messages or documents. A valid digital signature on a message gives a recipient confidence that the message came from a sender known to the recipient.
Digital signatures are a standard element of most <a href="/facts/Cryptographic_protocol/0WuyTkFo">cryptographic protocol</a> suites, and are commonly used for software distribution, financial transactions, <a href="/facts/Contract_management_software/QDqnMy8y">contract management software</a>, and in other cases where it is important to detect forgery or <a href="/facts/Tampering_(crime)/CVpB9xyP">tampering</a>.
Digital signatures are often used to implement <a href="/facts/Electronic_signature/FnVNSGMT">electronic signatures</a>, which include any electronic data that carries the intent of a signature, but not all electronic signatures use digital signatures. Electronic signatures have legal significance in some countries, including <a href="/facts/Brazil/QHkG46GL">Brazil</a>, <a href="/facts/Canada/cWWFM8oc">Canada</a>, <a href="/facts/South_Africa/vvXQpLgq">South Africa</a>, <a href="/facts/Russia/jfkCwyxn">Russia</a>, the <a href="/facts/United_States/P0sCdLe5">United States</a>, <a href="/facts/Algeria/UXDF4Tj6">Algeria</a>, <a href="/facts/Turkey/KIYAWAs0">Turkey</a>, <a href="/facts/India/1kKHcnxM">India</a>, <a href="/facts/Indonesia/vQnWU3IW">Indonesia</a>, <a href="/facts/Mexico/IT5bwhdh">Mexico</a>, <a href="/facts/Saudi_Arabia/uyUpe1J2">Saudi Arabia</a>, <a href="/facts/Uruguay/X6V0apCb">Uruguay</a>, <a href="/facts/Switzerland/LcGuxeTe">Switzerland</a>, <a href="/facts/Chile/uEyTfEcx">Chile</a> and the countries of the <a href="/facts/European_Union/6GYcR8qM">European Union</a>.
Digital signatures employ <a href="/facts/Asymmetric_key_algorithm/gowoFTxS">asymmetric cryptography</a>. In many instances, they provide a layer of validation and security to messages sent through a non-secure channel: Properly implemented, a digital signature gives the receiver reason to believe the message was sent by the claimed sender. Digital signatures are equivalent to traditional handwritten signatures in many respects, but properly implemented digital signatures are more difficult to forge than the handwritten type. Digital signature schemes, in the sense used here, are cryptographically based, and must be implemented properly to be effective. They can also provide <a href="/facts/Non-repudiation/uNAP1YIf">non-repudiation</a>, meaning that the signer cannot successfully claim they did not sign a message, while also claiming their <a href="/facts/Private_key/gowoFTxS">private key</a> remains secret. Further, some non-repudiation schemes offer a timestamp for the digital signature, so that even if the private key is exposed, the signature is valid. Digitally signed messages may be anything representable as a <a href="/facts/Bitstring/PAfzTEHB">bitstring</a>: examples include electronic mail, contracts, or a message sent via some other cryptographic protocol.

Digital signature open-in-new

Digital signature