iis security: I understand the use of public/private keys for encrypting. Could someone
explain to me how a second public/private key pair is used for signing?
Thanks.

Hi John

I am not sure a second public/private key would be used.

To sign a document you encypt the hash of the document using your private
key.
Then if someone wishes to check they would also calculate the hash and then
use
your public key to decrypt your previously encrypted has and compare the
two.

The only time I have used two public-private key pairs is in a key exchange
over
an insecure channel - though there are other ways.

[quoted text, click to view]