#1E1E1E

Acrobat

Understanding the digital signature standard (DSS) and types of digital signatures.

A clear guide to the digital signature standard, its algorithms, and how different signature types help secure digital documents in India.

Explore Adobe Acrobat for business

Businessman selecting MFA virtual button, symbolising multi-factor authentication and secure cloud-based access with biometrics and encryption.
The digital signature standard, or DSS, is the foundation for how digital signatures are securely created and verified in modern cryptographic systems. Introduced to define a consistent and secure approach to signing digital documents, DSS outlines the approved algorithms and procedures that ensure authenticity, data integrity and non-repudiation. With digital transactions now standard across legal, financial and government workflows, understanding how the DSS framework works and what types of digital signatures are used in practice is essential. This article explores how DSS operates, the cryptographic basis behind digital signatures, different signature types, and how tools like Adobe Acrobat implement these standards to support secure, compliant document workflows.

What is the digital signature standard?

The Digital Signature Standard (DSS) is a cryptographic framework established by the United States National Institute of Standards and Technology (NIST). It outlines how digital signatures should be generated and verified to meet high security standards.

Although DSS originated in the US, its core components such as public key encryption, hash functions and certificate-based verification are now widely used in digital signing practices around the world. In India, digital signature use is governed by the Information Technology Act, 2000, which requires that official digital signatures be issued by licensed Certifying Authorities (CAs) under the supervision of the Controller of Certifying Authorities (CCA). These Indian regulations align closely with DSS principles and support recognised algorithms such as RSA and ECDSA. To learn how to apply one in practice, explore how to create a digital signature using Adobe Acrobat.

What is digital signature in cryptography?

A digital signature in cryptography refers to the process of using mathematical algorithms to verify that a digital message, file or document originates from a known sender and has not been tampered with.

This cryptographic process involves two core components:

  • A private key, known only to the signer, is used to generate the digital signature.
  • A public key is used by recipients to verify the authenticity of that signature.

When users ask what digital signature in cryptography is, it’s important to highlight two key guarantees:

  • Authenticity – The signature confirms the identity of the signer.
  • Integrity – The document has not been modified since it was signed.

How a digital signature works: A visual breakdown.

While a digital signature diagram would normally illustrate this, the signing process is straightforward when broken down step by step:

  1. A hash (a fixed-length representation) of the document is created.
  2. The signer encrypts the hash using their private key - this becomes the digital signature.
  3. The document and signature are shared with the recipient.
  4. The recipient decrypts the signature with the sender’s public key and compares it to a new hash of the document.
  5. If both hashes match, the document is verified and unaltered.

This process, based on standard digital signature cryptography, is built into Acrobat’s signing experience. For the user, it’s as simple as applying a signature and sending a document - with all cryptographic steps handled automatically.

DSS algorithm: What it includes.

The DSS algorithm allows for several cryptographic methods under one standard, each with varying applications:

  • DSA (Digital Signature Algorithm): Used widely in public sector systems.
  • RSA: Known for strong encryption, widely adopted in both government and private sectors.
  • ECDSA (Elliptic Curve Digital Signature Algorithm): Offers high security with smaller keys, making it ideal for mobile or bandwidth-constrained environments.

In India, digital certificates issued by providers like eMudhra, Capricorn and Sify support these algorithms under the CCA framework. This ensures that digital signatures generated in India are compatible with DSS requirements and internationally accepted formats.

Digital signature standards for modern business: Streamlining certificates, documentation and approvals across devices

Types of digital signatures.

There are three main types of digital signatures, each suited to different use cases:

1. Simple digital signature.

This is a basic visual signature - often just a typed name or drawn mark. It does not use encryption or identity verification.

2. Certificate-based digital signature.

This involves a verified digital certificate that links the signer’s identity to the document using encryption. Common in business and regulated industries.

3. Advanced or qualified digital signature.

These signatures are created using government-recognised certificates and often involve secure hardware like smart cards or USB tokens. In India, such signatures are required for government tenders and legal filings. Adobe Acrobat enables all three levels, with a particular focus on certificate-based and advanced digital signatures that meet compliance needs.

Tips for using digital signatures securely.

To get the most from your digital signature workflows, consider the following tips:

  • Use digital certificates from a licensed and trusted authority.
  • Store private keys in encrypted environments.
  • Enable document timestamping to retain validity even after a certificate expires.
  • Ensure team members are trained in proper signature handling and verification.
  • Always use software that validates signatures automatically.

For teams working in document-heavy sectors like insurance or finance, following digital signature best practices can streamline approval cycles and reduce compliance risks. Explore how digital signatures are transforming the insurance industry with Acrobat’s secure workflows.

Common issues and how to troubleshoot them.

Signature not recognised.

Ensure the certificate is issued by a trusted authority and that Acrobat’s certificate trust settings include the issuing CA.

Document appears to have been modified.

This occurs when edits are made after signing. Re-sign the document only after final edits are complete.

Certificate has expired.

Use timestamping to prove that the signature was valid at the time of signing. Acrobat supports this where enabled.

Digital ID not visible in Acrobat.

Verify that the digital ID is installed and properly linked.

Why this matters for India’s digital future.

As India continues its shift toward paperless governance and digital infrastructure, digital signatures are becoming an essential trust mechanism. From e-filing taxes and securing business contracts to signing legal documents and participating in public tenders, secure digital signature solutions ensure compliance and integrity.

With support for Indian CCA-licensed certificate providers and global DSS standards, Adobe Acrobat offers a secure, intuitive way for professionals and institutions across India to adopt digital signing with confidence.

Digital document approval with green check mark representing compliance with digital signature standards and secure e-signing.

Frequently asked questions.

Can a digital signature be legally used on contracts and agreements in India?

Yes, digital signatures are legally valid on most types of contracts in India under the Information Technology Act 2000. However, certain exceptions exist such as for wills, negotiable instruments and real estate deeds where handwritten signatures may still be required. It is best to consult legal guidance for high value or regulated transactions.

How do I know if a digital signature has been tampered with after signing?

Tools like Adobe Acrobat alert you immediately if a document has been modified after being signed. You will see status messages such as "Signature not valid" or "Document has been altered" if any change has occurred after the signature was applied.

Is it possible to apply a digital signature to scanned physical documents?

Yes. You can scan a paper document into PDF format and then apply a digital signature to the file. However, note that this does not verify the original content. It only authenticates the signer and confirms that no changes were made after the signature was applied.

Can I use a digital signature without internet access?

Yes, once your digital certificate is installed, you can sign documents offline. However, some features like certificate validation or timestamping may not function without a connection.

What is the difference between timestamping and signing a document?

Signing proves the authenticity of the content and the identity of the signer. Timestamping locks in the date and time of the signature. It is especially useful for compliance, as it ensures the signature remains valid even if the certificate expires later.

Are digital signatures accepted across government platforms in India?

Yes. Most government portals including the Ministry of Corporate Affairs, GST portal and eTendering platforms accept digital signatures issued by CCA licensed providers. These signatures must often be in the Class 2 or Class 3 category depending on the use case.

What should I do if my digital certificate is about to expire?

You should renew your certificate through your issuing authority before it expires. If it does expire, you will not be able to use it for new signatures. Previously signed documents will remain valid if timestamped correctly at the time of signing.

Can a single person have multiple digital signatures?

Yes. A user can hold multiple digital certificates, each potentially for different roles or organisations. For example, one for personal use and another for official company documents. Each certificate will have its own key pair and issuing authority.

What happens if I lose access to my digital certificate or private key?

If you lose access to your private key, you can no longer use that certificate to sign documents. You should report it to your Certificate Authority immediately so they can revoke the certificate and issue a new one. Always store private keys securely to avoid this risk.

Is there a way to verify someone else's digital signature before trusting it?

Yes. Most digital signature tools including Adobe Acrobat validate incoming signatures automatically. You can also view the certificate details, check the issuing Certificate Authority and confirm whether the certificate is trusted and still valid.

More resources

Content as a Service v3 - Thursday 3 July 2025 at 14:13

https://main--dc--adobecom.hlx.page/dc-shared/fragments/roc/blog/business/do-more-with-acrobat-blade