Hi all, I was hoping to get some clarification about "integrity checking" with Digital Signatures.
Digital signatures are commonly described as having both the properties of authenticating the message AND checking the integrity of a message. Background: I'm creating a digital signature by generating SHA256 of the file which is then signed using RSA. My question is this: is the level of "integrity checking" of Digital Signatures as good as or equivalent to the plain old integrity checking you would get if you manually compared the hashes? For example, are there any flaws in the digital signature verification process which mean that it's not as good for checking integrity as if you had the hash of the file (through some trusted manner). Thanks for any help, John _______________________________________________ FDE mailing list [email protected] http://www.xml-dev.com/mailman/listinfo/fde
