Signing
In the process of messaging with a digital signature;
- The hash value of the message is calculated,
- The hash value is signed using the private key,
- The message, digital signature, and digital certificate are combined to create a signed data packet, then sent to the recipient.
Verification
In the process of verifying a message that comes with a digital signature;
- The digital certificate belonging to the entity that performed the signing is extracted from the signed data packet and its validity checks,
- After confirming the validity of the digital certificate, verifies that it was issued by a trusted root,
- The Digital Signature data is then validated using the public key,
- Following the verification of the Digital Signature, the obtained authenticated hash value is compared with the summary of the message,
- If these hash values match, the signature is considered verified.