PROJECT ON DIGITAL SIGNATURE Submitted by: Submitted to: NAME: Roll no: Reg.no. :

INDEX OF THE PROJECT: DEFINITION Differences between digital and handwritten signatures Issuance of Class-II Digital Signature Digital signature creation and verification process Reasons for applying a digital signature to communications Some practical consequences Conclusion

Definition A digital signature is a mathematical scheme for demonstrating the authenticity of a digital message or document. A valid digital signature gives a recipient reason to believe that the message was created by a known sender, such that the sender cannot deny having sent the message (authentication and non-repudiation) and that the message was not altered in transit (integrity). Digital signatures are commonly used for software distribution, financial transactions, and in other cases where it is important to detect forgery or tampering. Back

DIFFERENCES BETWEEN DIGITAL AND HANDWRITTEN SIGNATURES A handwritten signature is biologically linked to a specific individual, whereas a digital signature relies on the protection afforded a private signature key by the signer, and the procedures implemented by a Certification Authority. Handwritten signatures are under the direct control of the signer, whereas digital signatures must be applied by a computer commanded by the signer. The data integrity service provided by digital signatures is much stronger than that provided by handwritten signatures Handwritten signatures can be witnessed, whereas digital signatures cannot be - though they can be notarized. Handwritten signatures can be verified in perpetuity, whereas digital signatures will likely become unverifiable after ten years or so due to data processing equipment and cryptographic standards obsolescence, certificate expiration, and other factors. Back

Issuance of Class-II Digital Signature Only the below vendors are allowed to authorize the Digital Signature: MTNL CA TCS IDBRT SAFESCRYPT (SATYAM) nCODE Solutions NIC Central Excise & Customs e-Mudhra (3i Infotech Consumer Services Limited) The Charges for One year validity worth Rs. 300 to 1000/- depending upon the area. Back

The digital signature creation and verification process achieves the following legal requirements: Signer authentication: A person’s digital signature cannot be forged unless his private key is stolen. This means that if a digital signature can be verified by Sanya’s public key, then it must have been created by Sanya’s private key. The digital signature verification process thus authenticates the identity of the signer. Message authentication: A digital signature is based upon the hash value (or message digest) of the actual message. Thus a digital signature is unique for each message and automatically authenticates the message. Affirmative act: The process of digital signature creation requires the signer to use his private key (usually by entering a password). This overt act alerts the signer that he is initiating a transaction that may have legal consequences Back

Reasons for applying a digital signature to communications  Authentication: Although messages may often include information about the entity sending a message, that information may not be accurate. Digital signatures can be used to authenticate the source of messages  Integrity: In many scenarios, the sender and receiver of a message may have a need for confidence that the message has not been altered during transmission. Although encryption hides the contents of a message, it may be possible to change an encrypted message without understanding it.  Non- repudiation: Non-repudiation, or more specifically non-repudiation of origin, is an important aspect of digital signatures. By this property, an entity that has signed some information cannot at a later time deny having signed it. Similarly, access to the public key only does not enable a fraudulent party to fake a valid signature. Back

 The use of digital signatures for high-value financial transactions outside the protection of trading partner agreements is likely to proceed relatively slowly, until experience with the risks associated with use of digital signatures is accrued.  Applications requiring high levels of non-repudiation assurance will likely require the use of digital time-stamping (or notary) services. These services may be provided by commercial or Government entities. The differences between handwritten and digital signatures will likely have some practical consequences: Back

Conclusion:  It seems unlikely that digital signatures will fully replace handwritten signatures in the foreseeable future. Handwritten signatures have a lot going for them - they are fast, cheap, easily understood, and last forever. Digital signatures will probably never be used for treaty authentication, signing bills into law, or other ceremonial or historical occasions.  When handwritten signatures were invented, they augmented seals, which had been in use for over 3,000 years - they did not replace them. In fact, seals continue to be used today. Instead, handwritten signatures took their place beside seals as an authentication mechanism useful for particular purposes, and over time, handwritten signatures gradually increased in the frequency and scope of their usage. It is likely to be much the same with digital signatures, which are the latest authentication tool in the continuing advancement of communications technology. Back