The document discusses digital signatures, which use asymmetric cryptography to authenticate the identity of the sender of a message or signer of a document. The process involves digital signature creation using a hash result and private key, and digital signature verification using the original message and public key. Key requirements are a private key known only to the sender, a public key known to everyone for verification, and a digital identity certificate issued by a certificate authority.

1. University of Chittagong
Digital Signature
Naimur Rahman
Computer Science & Engineering, University of Chittagong
December 7, 2020
Naimur Rahman Digital Signature 1

2. University of Chittagong
Symmetric Key Cryptography
Figure:
Naimur Rahman Digital Signature 2

3. University of Chittagong
Asymmetric Key Cryptography
Figure:
Naimur Rahman Digital Signature 3

4. University of Chittagong
What is digital signature?
Digital Signature is a type of asymmetric cryptography used to
simulate the security properties of a signature in digital, rather than
written, form.
Digital Signature is an electronic signature that can be usd to
authenticate the identitiy of the sender of a message or the signer of
a document, and possibly to ensure that the original content of the
message or document that has been sent is unchanged.
Naimur Rahman Digital Signature 4

5. University of Chittagong
How it works?
Figure:
Naimur Rahman Digital Signature 5

6. University of Chittagong
How it works?
Figure:
Naimur Rahman Digital Signature 6

7. University of Chittagong
How it works?
The use of digital signatures usually involves two processes, one
performed by the signer and the other by the receiver of the digital
signature:
i. Digital Signature Creation
ii. Digital Signature Verification
Naimur Rahman Digital Signature 7

8. University of Chittagong
How it works?
Digital Signature Creation:
– Uses a hash result derived from and unique to both the signed
message and a given private key. For the hash result to be secure,
there must be only a negligible possibility that the same digital
signature could be created by the combination of any other message
or private key.
Digital Signature Verification:
– is the process of checking the digital signature by reference to the
original message and a given public key, thereby determining whether
the digital signature was created for that same message using the
private key that corresponds to the referenced public key.
Naimur Rahman Digital Signature 8

9. University of Chittagong
Key Requirements
Private key:
– Only known by the owner/sender
– Used to create the digital signature
Public key
– It is known to everyone.
– Used to verify the digital signature.
Naimur Rahman Digital Signature 9

10. University of Chittagong
Key Requirements
– Digital Identity that establishes your credentials when doing
business or other transactions on the Web
– Issued by a Certifying Authority (CA)
– Contains your name, serial number, expiration dates, public key,
signature of CA.
Certificate Authority:
– Trusted Third Party.
– An organization which issues public key certificates.
– Assures the identity of the parties to whom it issues certificates.
– Maintains online access to the public key certificates issued.
Naimur Rahman Digital Signature 10