Citizens and Spy Programs?

[Wild Cobra]

They never were. You don't need to pass the private key.

Then there is not an acceptable level of security. Someone's lying to you about how secure it is.

We are at an impasse. I'm done with this conversation.

[LnGrrrR]

ElNono, mind updating me on how digital signatures work? Isn't that done with your private key because no one else can sign it with your private key but you?

[ElNono]

ElNono, mind updating me on how digital signatures work? Isn't that done with your private key because no one else can sign it with your private key but you?

Correct. Basically you get a digest of the data you want to sign (SHA1, etc), then you do your usual public key crypto encoding, using your private key.
Then the recipient decrypts the hash using your public key and compares it against the hash of the data it received. If hashes match, then you have a winner.

[LnGrrrR]

Correct. Basically you get a digest of the data you want to sign (SHA1, etc), then you do your usual public key crypto encoding, using your private key.
Then the recipient decrypts the hash using your public key and compares it against the hash of the data it received. If hashes match, then you have a winner.

I thought it went that way. Thanks