Digital Signature
Noun · Security & Infosec
Definitions
A cryptographic scheme that proves a message was created by a known sender (authentication) and wasn't altered in transit (integrity). The signer hashes the message and encrypts the hash with their private key. Anyone can verify by decrypting with the public key and comparing hashes. Used for code signing, JWTs, TLS certificates, and git commit signing.
In plain English: A mathematical proof that a message or file was created by a specific person and hasn't been changed since.
Example: "Every npm package is digitally signed — your package manager verifies the signature before installation to detect tampering."
Related Terms
- Wallet
- SLSA
- HMAC
- Passkey
- Post-Quantum Cryptography
- Boot Integrity
- Challenge-Response
- Cleartext
- Code Signing
- Crypto Agility
- Cryptographic Hash
- Cryptojacking Attack
- Entropy Analysis
- File Integrity Monitoring
- Hash Extension Attack
- HMAC Authentication
- Keystroke Injection
- Message Authentication Code
- NTLM
- PBKDF2
- WORM Storage
- 802.1X
- Account Enumeration
- AES-GCM
- Anti-Cheat
- Anti-Replay
- Blowfish
- Collision Resistance
- Cryptographic Signature
- Data Tampering
- Fabrication Attack
- Log Integrity
- Message Digest
- Non-Repudiation
- Post-Quantum
- RADIUS
- Relay Attack