A digital signature created with a private key is verified with the corresponding public key.

### Why this is right The described process uses a private key to create the signature and the corresponding public key to check it. The keys have distinct roles, even though they belong to the same key pair. ### The concept A **private key** is intended to remain under its owner’s control, while a **public key** is shared with people who need to verify signatures. A signature created using the private key can be checked using its matching public key. This relationship lets a recipient test a signature without being given the signing key. A successful check supports the conclusion that the signed data matches the signature and that the signature was made with the paired private key. It does not prove that a message is fresh, nor does the signature encrypt the document. ### Terms - **Private key**: the protected key used by the sender to create the signature. - **Public key**: the corresponding key provided to recipients for verification. - **Key pair**: the related private and public keys used in this signature process. - **Digital signature**: cryptographic data that can be checked against a document using a public key. ### Remember Keep the signing key private, and give recipients the corresponding public key to verify.