Fundamentals of InfoSecintermediate
Explain why changing a document after it has been signed should cause verification with the original signature to fail.
Answer
The signing workflow uses a hash calculated from the document's contents. A change to the document changes the hash, so the original signature no longer corresponds to the altered document. Verification with the corresponding public key should therefore fail.
Explanation
### Why this is right
A signature is tied to the document’s contents through a hash. When the contents change, the hash calculated during verification differs from the one associated with the original signature, so the check should fail.
### The concept
A **hash** is a compact value calculated from data. In the described workflow, it represents the document’s contents for the signature operation. The sender signs using a private key, and the recipient verifies using the corresponding public key. If the document is edited, even if the change appears small, its content no longer matches what was signed. That is why verification detects alteration. The signature does not prevent editing; it helps reveal that editing occurred.
### What a good answer covers
- The document is processed to calculate a hash.
- The signature is associated with the document through that hash.
- A changed document produces a different hash.
- The original signature should not verify against the changed document.
### Terms
- **Hash**: A compact value calculated from data.
- **Verification**: Checking whether a signature is valid for a document and key.
- **Integrity**: The condition of data remaining unchanged.
### Remember
A signature detects a change by checking whether the document still matches what was signed.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free