ডিজিটাল সিগনেচার কি এবং কিভাবে কাজ করে? | ক্রিপ্টোগ্রাফিতে ডিজিটাল স্বাক্ষর

Asymmetric Encryption: https://youtu.be/OuZEm1BQuS0 Symmetric Encryption: https://youtu.be/-CK7k6ZhL-s Cryptography and Network and Cyber Security Bangla Tutorial Full Playlist:https://youtube.com/playlist?list=PLW7fU_8SZVrtqDPmhCpINAsKJ8lomwZ-i Computer Network full Playlist: https://youtube.com/playlist?list=PLW7fU_8SZVruBsFfULu9QRDsFfFSg77Cu Introduction to MAC address: https://youtu.be/xntVcZXK3KE Introduction to IP address: https://youtu.be/tskNVydjHcY IP vs MAC address: https://youtu.be/Lji9_XmSgdg Wireless Ad Hoc Network Playlist:https://youtube.com/playlist?list=PLW7fU_8SZVrtgOkfjZFLh_46QvOR6Di5y Machine Learning full Playlist: https://youtube.com/playlist?list=PLW7fU_8SZVrv3ZsJ-XsPA0RrriR1mlQlA Management Information System Playlist: https://youtube.com/playlist?list=PLW7fU_8SZVrs0h1gOsZRokHzlYmcShvjp Algorithm Playlist: https://youtube.com/playlist?list=PLW7fU_8SZVrv12r_JAXHNOGF1av6eqPbS Data Structure Playlist: https://youtube.com/playlist?list=PLW7fU_8SZVrtXC0wsG7_X4onIDuKvapXH Cryptography Digital signatures Digital signatures are the public-key primitives of message authentication. In the physical world, it is common to use handwritten signatures on handwritten or typed messages. They are used to bind signatory to the message. Similarly, a digital signature is a technique that binds a person/entity to the digital data. This binding can be independently verified by receiver as well as any third party. Digital signature is a cryptographic value that is calculated from the data and a secret key known only by the signer. In real world, the receiver of message needs assurance that the message belongs to the sender and he should not be able to repudiate the origination of that message. This requirement is very crucial in business applications, since likelihood of a dispute over exchanged data is very high. Model of Digital Signature As mentioned earlier, the digital signature scheme is based on public key cryptography. The model of digital signature scheme is depicted in the following illustration − Model Digital Signature The following points explain the entire process in detail − Each person adopting this scheme has a public-private key pair. Generally, the key pairs used for encryption/decryption and signing/verifying are different. The private key used for signing is referred to as the signature key and the public key as the verification key. Signer feeds data to the hash function and generates hash of data. Hash value and signature key are then fed to the signature algorithm which produces the digital signature on given hash. Signature is appended to the data and then both are sent to the verifier. Verifier feeds the digital signature and the verification key into the verification algorithm. The verification algorithm gives some value as output. Verifier also runs same hash function on received data to generate hash value. For verification, this hash value and output of verification algorithm are compared. Based on the comparison result, verifier decides whether the digital signature is valid. Since digital signature is created by ‘private’ key of signer and no one else can have this key; the signer cannot repudiate signing the data in future. It should be noticed that instead of signing data directly by signing algorithm, usually a hash of data is created. Since the hash of data is a unique representation of data, it is sufficient to sign the hash in place of data. The most important reason of using hash instead of data directly for signing is efficiency of the scheme. Let us assume RSA is used as the signing algorithm. As discussed in public key encryption chapter, the encryption/signing process using RSA involves modular exponentiation. Signing large data through modular exponentiation is computationally expensive and time consuming. The hash of the data is a relatively small digest of the data, hence signing a hash is more efficient than signing the entire data.