What is Digital Signature?
A cryptographic signature using public-key infrastructure (PKI) that mathematically proves authorship and detects any tampering.
A digital signature uses asymmetric cryptography — typically RSA or ECDSA — to bind a private key to a document. Anyone with the matching public key can verify (a) the signer's identity and (b) that the document hasn't changed since signing. Digital signatures are a subset of electronic signatures, distinguished by their cryptographic backing. Under eIDAS they're the basis of Advanced (AdES) and Qualified (QES) electronic signatures. PDF Verified hashes every signed document with SHA-256 and exposes the hash on a public verification URL so anyone can confirm authenticity.
PKI and certificate authorities
Digital signatures rely on a Public Key Infrastructure (PKI): a trusted Certificate Authority (CA) issues a signing certificate after verifying the holder's identity. The signer's software uses the certificate's private key to encrypt a hash of the document; verifiers use the public key to decrypt and compare.
Hashes and tamper-evidence
Before signing, the document is hashed with SHA-256 (or stronger). Any change to a single byte produces a completely different hash, so a digital signature is also a tamper seal — if even one character changes after signing, verification fails.
When you need a true digital signature vs an eSignature
For most commercial contracts a captured eSignature is sufficient. For QES-grade transactions in regulated EU/UK contexts, or for cross-border filings that require non-repudiation, a TSP-issued digital signature is required. PDF Verified offers TSP integration on Business Plus.