312-50V11 · Question #378
For messages sent through an insecure channel, a properly implemented digital signature gives the receiver reason to believe the message was sent by the claimed sender. While using a digital signature
The correct answer is D. Sender's private key. In a digital signature, the sender encrypts the message digest with their private key to prove authenticity and enable non-repudiation.
Question
For messages sent through an insecure channel, a properly implemented digital signature gives the receiver reason to believe the message was sent by the claimed sender. While using a digital signature, the message digest is encrypted with which key?
Options
- ASender's public key
- BReceiver's private key
- CReceiver's public key
- DSender's private key
How the community answered
(35 responses)- A3% (1)
- B6% (2)
- C3% (1)
- D89% (31)
Why each option
In a digital signature, the sender encrypts the message digest with their private key to prove authenticity and enable non-repudiation.
The sender's public key is used by recipients to verify (decrypt) the signature, not to create it - encrypting with the public key would allow anyone to forge the signature.
The receiver's private key is used to decrypt confidential messages sent to them in asymmetric encryption, and plays no role in validating or creating a digital signature.
The receiver's public key is used to encrypt data intended for the receiver's eyes only, which is a confidentiality operation entirely separate from digital signature authentication.
The sender uses their own private key to encrypt the message digest, creating the digital signature. The recipient then decrypts the digest using the sender's corresponding public key - if decryption succeeds and the digest matches, it proves the message was signed by the entity holding that private key and has not been tampered with in transit.
Concept tested: Digital signature creation using sender's private key
Source: https://csrc.nist.gov/publications/detail/fips/186/5/final
Topics
Community Discussion
No community discussion yet for this question.