Bitcoin: Digital signatures발음듣기
대기중
Bitcoin: Digital signatures
59문장
0%
베트남어 번역 0명 참여
출처 : 칸아카데미
번역
0%
[Voiceover] A digital signature is basically the mathematical mechanism for essentially combining a public sequence of numbers with a given digital message, and you can really think of a digital signature in many ways as the electronic analog of a physical signature.발음듣기
대기중
In a physical signature, you'll typically affix, let's say, a sequence of characters representing your name or identity to a document.발음듣기
대기중
This process effectively binds your identity to that document and more so by formulating the characters in your name, and maybe some particular to unique or peculiar way that's unique to you.발음듣기
대기중
Now in a digital signature scheme, it turns out you can achieve these kinds of properties mathematically.발음듣기
대기중
Now, some of the more well-known digital signature schemes include things like the RSA digital signature scheme, which stands for the Rivest-Shamir-Adleman scheme.발음듣기
대기중
And, actually, if you were to use a scheme like RSA or DSS, in my mind, it's actually a lot harder to forge these digital signatures than it is to forge a handwritten signature.발음듣기
대기중
So in this particular video, I'll try to describe the overall higher-level mechanics, if you will, of a digital signature scheme, but I won't actually go into or describe the underlying mathematical details of, let's say, a specific scheme like RSA or DSS, at least not in this video.발음듣기
대기중
The way that a digital signature scheme works is let's say you have a user, and I'm going to call her Alice, and let's say Alice wants to, digitally sign a document.발음듣기
대기중
In the scheme, in a digital signature scheme, Alice is going to first generate two keys, and these two keys are known as the signing key, the signing key, which is a private key, so I'm going to use red to denote it, and we'll abbreviate the signing key as SK.발음듣기
대기중
Now the actual process of coming up with a signing key and a verification key kind of happens concurrently.발음듣기
대기중
Alice will generate these two keys at the same time, and they're going to have a mathematical relationship but the interesting thing is that you want it to be the case that the verification key is public, and the signing key will be private but more so, in a digital signature scheme, it should be hard to come up with the verification key, or rather, it should be hard to come up with the signing key, rather, if you only see the verification key.발음듣기
대기중
So basically, if you have a message, and let's call this message M, and you wish to digitally sign that message.발음듣기
대기중
What you're going to basically do is apply a mathematical transformation, Alice is going to apply a mathematical transformation to the message M and her signing key SK, and the result of that transformation, the output of that transformation will be a special sequence of numbers that we call the signature.발음듣기
대기중
Now, the interesting thing here is that the signature basically is one that is derived from a combination of the message M together with the signing key, the private signing key of Alice, and it's going to effectively produce a short, a relatively short sequence of numbers as an output.발음듣기
대기중
In particular, digital signature schemes should be designed, or they typically are designed so that only the person who possesses the signing key, that private signing key is capable of generating this type of an output, this type of a signature, S of M on the message M.발음듣기
대기중
Now, the verification process is kind of analogous to the signing process, but it involves the public verification key.발음듣기
대기중
So in the verification process, you actually have three different inputs, so the first input will be the message that you want to verify the signature of.발음듣기
대기중
You also need in addition to the message, you need to get as input the signature on that message.발음듣기
대기중
What does that S of M look like, and then finally, the input, the final input to the verification scheme will be the public key, the public verification key that belongs to Alice.발음듣기
대기중
These three inputs are put in, and there's a mathematical transformation that's applied to these inputs, and basically what that mathematical transformation is trying to ascertain or to check is that the signature that you see corresponding with the message M is one that would have been produced by Alice's private signing key.발음듣기
대기중
Now, what I think is really remarkable is that you can actually carry out this process with just the verification key, that you don't actually need the signing key to validate the digital signature.발음듣기
대기중
And so, as you can see, the process of signing effectively will bind this public verification key.발음듣기
대기중
It binds the public verification key to Alice, somehow, because Alice is the one who published this verification key and told the whole world, "Hey, this is my verification key in the system, and only I will be able to sign messages that will be considered valid with respect to that verification key."발음듣기
대기중
Because the message is now being essentially bound to this public key, and if you think of the public key as an identifier of sorts, maybe and identifier for Alice, then you can think of digital signing as a process that basically binds an identity to an underlying message, and that really gives us, in the mathematical sense, it gives us the analog of a traditional handwritten signature.발음듣기
대기중
First of all, you'll notice that the transformation that produces the actual digital signature itself, this transformation right here that produces S of M, this transformation basically takes the message.발음듣기
대기중
It takes the message as one of its inputs, and what that means is that the signature is dependent on the message.발음듣기
대기중
Now, in this sense, a digital signature is actually different from a traditional handwritten signature.발음듣기
대기중
But your digital signature is very sensitive to what you're signing, and it will vary depending on what you sign.발음듣기
대기중
The second remark I want to make is that digital signatures are often associated with a cryptographic hash function, and I've already done a video on cryptographic hash functions, and, in fact, I mention in that video, and I'll reiterate here that the first cryptographic hash functions were actually designed specifically with digital signatures in mind as their killer application, if you will.발음듣기
대기중
So, in particular, what typically happens is that before you actually sign an arbitrary message, let's say you have a huge message here that you want to sign.발음듣기
대기중
Before you sign this message, you're going to basically apply a cryptographic hash function to that message and you're going to get an output from that function, that cryptographic hash function, you'll get a shorter output, the digest of that cryptographic hash function, and then what you do in a signing algorithm is that rather than signing the original message, you will first hash it and then sign the hash of the message.발음듣기
대기중
This two-step paradigm of doing kind of hashing and then signing, really ends up simplifying the process of digital signing since you effectively are no longer dealing with an arbitrary length input, but instead, you're working with a fixed-length quantity.발음듣기
대기중
And this hashing sign paradigm actually is safe as long as it's hard to find two messages that map to the same output under the application of the hash function.발음듣기
대기중
In other words, you can't come up with two messages that are different, but whose output when the hash function is applied to them are identical.발음듣기
대기중
In other words, the hash function, as long as it's collision resistant, it will result in a secure signature scheme for this hash and sign paradigm.발음듣기
대기중
Okay, now you can probably think about this for a moment, but if you could find, let's say, two input messages that are distinct and that map to the same output under an application of the hash function, that would, in fact, lead to some bizarre problems because a signature on the first message would then be identical to a signature on the second message since in both cases, what you're doing is you're not signing the actual message.발음듣기
대기중
So, if the hashes are identical, you'll end up with the identical signature on two different messages, and that could create problems like making it easy for maybe a particular message to be forged under this digital signature approach, and that's obviously something that you don't want.발음듣기
대기중
You don't want someone to be able to come up with a signature on a different message, as opposed to maybe the one that you initially intended to sign.발음듣기
대기중
Now, it is possible, and I just want to make this clear, it's possible to describe digital signatures with a lot more mathematical formalism, but my hope with this video really was to give you a flavor, if you will, without drilling into all of the underlying nuances in mathematics.발음듣기
대기중
칸아카데미 더보기더 보기
-
Reid Hoffman - Founder of LinkedIn
517문장 0%번역 좋아요3
번역하기 -
16문장 0%번역 좋아요1
번역하기 -
36문장 0%번역 좋아요1
번역하기 -
81문장 0%번역 좋아요1
번역하기
