Digital signature schemes
Similar to a MAC, but with two keys
- sender does sig = sign(priv,message)
- receiver checks that message = vrfy(pub,sig)
Some public key encryption systems also work as signature schemes (RSA, etc), some signature schemes only do signature (DSA)
Establishes integrity & authenticity, but also allows 3rd party to verify (receiver can’t forge)
- unless private key was compromised...