# What is a digital signature?

A digital signature is a value computed from data with a private key, which anyone holding the matching public key can check. If the check passes, two things are proven: the data comes from the holder of that private key, and it has not changed since it was signed. Signatures protect much of what you rely on without noticing: software updates and drivers, the TLS certificates that prove a website's identity, signed PDFs and e-invoices, e-mail signed with S/MIME, and the code your developers ship. In the EU, qualified electronic signatures under the eIDAS Regulation also carry legal weight. A signature is only as trustworthy as its private key: if the key is stolen, an attacker can sign malware that looks genuine, which is why signing keys belong in hardware security modules or similarly protected stores, with few people able to use them. Today's signatures use RSA or elliptic curves, which a large quantum computer would break; their post-quantum replacements are ML-DSA and SLH-DSA.

FAQ: [Encryption and encrypted traffic](https://netsenx.com/en/faq/encryption) · https://netsenx.com/en/faq/what-is-a-digital-signature

## Read next

- https://netsenx.com/en/encrypted-traffic-analysis
- https://netsenx.com/en/what-is-ndr

## Related questions

- [What is a TLS certificate?](https://netsenx.com/en/faq/what-is-a-tls-certificate)
- [What happens when a TLS certificate expires?](https://netsenx.com/en/faq/what-happens-when-a-tls-certificate-expires)
- [Why are TLS certificate lifetimes getting shorter?](https://netsenx.com/en/faq/why-are-tls-certificate-lifetimes-getting-shorter)
- [Are self-signed certificates on internal servers a problem?](https://netsenx.com/en/faq/are-self-signed-certificates-on-internal-servers-a-problem)
- [What is mutual TLS (mTLS)?](https://netsenx.com/en/faq/what-is-mutual-tls)