Signature algorithm
A signature algorithm is a cryptographic algorithm that generates or verifies digital signatures for data using associated key material.
Secure APIs
A signing algorithm is a cryptographic algorithm that generates or verifies signatures on digital data.
- How it is used
- Uses signing algorithms to establish JWT integrity and authenticity during API authentication and authorization.
- How deep it goes
- Explains JWT signing input, HMAC and asymmetric keys, then stops short of detailed cryptographic mathematics.
- Examples
- Demonstrates HS256 and PS256 JWTs, PyJWT issuance, OpenSSL RSA keys, JWKS key lookup, and JWT signature verification.
- What you can do after
- Build it from scratch, issue JWTs with PyJWT, configure asymmetric keys, and validate signatures with constrained algorithms.
Software Security for Developers
A signature algorithm is a cryptographic algorithm that generates or verifies digital signatures.
- How it is used
- Uses certificate signature algorithms to detect tampering and verify X.509 certificate authenticity.
- How deep it goes
- Defines the verification role and shows OpenSSL checks, but defers mathematical and protocol internals.
- Examples
- Uses github.com and DigiCert certificates, ECDSA with SHA-384, RSA with SHA-384, and OpenSSL verification commands.
- What you can do after
- Diagnose certificate verification by identifying its signature algorithm and investigating missing issuer certificates.
Read how Software Security for Developers explains signature algorithm →
Related concepts
- digital signatureproduces · A digital signature is cryptographic data generated with a private key and verified with corresponding public information to authenticate data or its signer and detect alteration.
- rsa-pssincludes · RSA-PSS is a probabilistic RSA digital-signature scheme using the probabilistic signature scheme encoding specified by PKCS #1.
- RS256includes · RS256 is a digital signature algorithm that uses RSA's RSASSA-PKCS1-v1_5 scheme with SHA-256.
- ECDSAincludes · ECDSA is a public-key digital signature algorithm that uses elliptic-curve arithmetic to generate and verify signatures.
- symmetric signing algorithmcontrasts with · A symmetric signing algorithm uses the same shared secret key to generate and verify a message authentication code or signature.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.