DIGITAL SIGNATURE

Instead of encrypting the entire file, the system creates a short code called a hash (or message digest) of the document. The sender then encrypts that hash with their private key. The receiver decrypts it using the public key; if the hash matches the document, the signature is valid. A trusted third party called a Certificate Authority (CA) often issues digital certificates to confirm who owns the keys