← Back to glossary

Asymmetric cryptographic mechanism providing integrity, authenticity, and non-repudiation (in certain contexts).

Definition

Digital signatures use a private key to sign data and a public key to verify the signature. They provide integrity and authenticity guarantees and are used in TLS certificates, signed documents, and software updates.

In plain English Asymmetric cryptographic mechanism providing integrity, authenticity, and non-repudiation (in certain contexts).

Why this matters

Why it matters: Signatures reduce the risk of malicious modification and supply-chain tampering.

Example

Example: Verify signatures on update packages; rotate keys and protect private signing keys with hardware-backed storage.