digital signature - How does the verification server recognize which public key to use in RSA? -
i trying implement (simplified) rsa-like verification process in (java) application. client sends request (data + private key signature) , server either rejects request or processes - depending on signature validity.
but don't understand how verification server knows public key use signature decryption. indeed, no public key - nor public key id - seem sent verification server.
does test authorized public keys ? or public key stored previous communication exchange ?
as figure attach question suggests, client sends certificate along signature, certificate contains public key, server check certificate validity , use check signature.
Comments
Post a Comment