Digital Signatures: RSA-PSS, ECDSA, Verification and a Signed License File
When the verifying side must not be able to sign, as with a license check running on a customer's server, you use a digital signature rather than a MAC: the private key signs and the public key shipped with the application only verifies. With real outputs we cover RSA-PSS versus PKCS#1 v1.5, why the ECDSA nonce matters, P1363 and DER formats, canonicalization, Bookstore's signed license file with keyId rotation, and the status of Ed25519 in .NET.
14 Nov 2026
·
12 min
·
2