Digital Signature
A PKI-based cryptographic authentication mechanism that verifies the identity of the signatory and ensures the integrity of an electronic document.
Full Definition
A digital signature uses asymmetric cryptography (Public Key Infrastructure — PKI) to authenticate an electronic record. The signatory has a private key (kept secret) and a public key (publicly available via a certificate issued by a licensed Certifying Authority). Signing creates a unique hash of the document encrypted with the private key; any recipient can verify this using the public key. Any alteration to the document after signing invalidates the signature. Under the IT Act, digital signatures use only those cryptographic techniques notified by the Central Government in the First Schedule.
In Indian Law
IT Act Section 2(p) (definition) and Section 3 (authentication of electronic records). Section 5 grants digital signatures the same legal recognition as handwritten signatures. Digital Signature Certificates (DSCs) are issued by licensed Certifying Authorities (CAs) under Controller of Certifying Authorities (CCA) oversight. DSCs are mandatory for: company filings with MCA (V2/V3 DSC), income tax return filing for companies, GST registration, e-procurement, and customs filings. Distinguished from the broader 'electronic signature' introduced by the 2008 Amendment.
Related Legal Sections
Frequently Asked Questions
What is the difference between a digital signature and an electronic signature?
A digital signature is PKI-based cryptographic authentication — specifically the asymmetric cryptography method. An electronic signature (Section 3A) is a broader, technology-neutral term introduced in 2008 that includes OTPs, biometrics, and Aadhaar-based eSign in addition to PKI-based digital signatures.
Who issues Digital Signature Certificates in India?
Licensed Certifying Authorities (CAs) regulated by the Controller of Certifying Authorities (CCA) under the Ministry of Electronics and IT. Major licensed CAs include eMudhra, Sify, and NSDL e-Gov.