digiallkirjade

Digiallkirjade, or digital signatures, are cryptographic signatures that verify the author of a digital document and ensure it has not been altered since signing. They provide authentication, data integrity, and non-repudiation, making it possible to trust the origin and contents of electronic records.

They work with a public–private key pair and a digital certificate. The signer applies their private key to the document to generate the signature, and anyone can verify it using the corresponding public key and the signer's certificate, which is issued by a trusted certificate authority. The certificate links the key to the signer’s identity and a chain of trust. Signatures may include a timestamp and can be revoked if the private key is compromised.

The use of digiallkirjad is common in governmental, financial, and business contexts. They rely on cryptographic standards and infrastructure such as public-key cryptography, digital certificates, and certificate revocation mechanisms. Legal frameworks in many jurisdictions recognize electronic signatures and regulate their validity. Under the European Union’s eIDAS regulation, electronic signatures come in levels such as electronic, advanced electronic, and qualified electronic signatures, with qualified signatures having the strongest legal presumption in many cases.

In practice, digital signatures enable secure online services, such as e-government portals, contract signing, and secure document workflows. Estonia is often cited for its extensive use of digital signatures, supported by national digital identity infrastructure like ID cards, Mobile-ID, and Smart-ID. Maintaining key security, protecting private keys, and managing certificate lifecycles are essential for sustaining trust in digital signatures.