Signature Stripping: A Digital Dilemma

  Adrian McCullagh
PhD Candidate,
Information Security Research Centre, Queensland University of Technology, and
Director, Electronic Commerce,
Gadens Lawyers, Brisbane
[email protected]

William Caelli,
Head of School of Data Communication,
Queensland University of Technology

Peter Little
Professor of Business Law,
Queensland University of Technology
 

Abstract

There have been a number of papers that identify the various differences and flaws as between a digital signature and a traditional signature. A primary risk in digital signature technology is the so-called 'binding' factor of the public/private key pair and the identity of the rightful holder of the key pair. This paper does not analyse this issue but instead concentrates on the issue of digital signature stripping. A digital document is simply a series of bits that can be interpreted by a computer and thus be transformed into human readable form. A digitally signed document is no different to that of digital document except that it has appended to it another series of bits that can be used to identify the signer and verify the integrity of the digital document. This paper investigates the theoretical though fundamental flaw of digital signature integrity and the right of attribution. In doing so the paper compares digital signatures to traditional hand written signatures that are pervasive in the paper-based environment. The paper also provides a solution, which involves the use of a trusted third party and the three-way communications hand-shake, which is a common communications protocol.

This is a Refereed article published on 28 February 2001.

Citation: McCullagh A et al, 'Signature Stripping: A Digital Dilemma', Refereed article, 2001 (1) The Journal of Information, Law and Technology (JILT). <http://elj.warwick.ac.uk/jilt/01-1/mccullagh.html>. New citation as at 1/1/04: <http://www2.warwick.ac.uk/fac/soc/law/elj/jilt/2001_1/mccullagh/>.

1. Introduction

Traditional signatures are mainly used for evidential purposes and are, in longitudinal contracts[ 1 ] as opposed to instantiated contracts[ 2 ], verified only when a dispute arises. Hence, the value of a traditional signature is primarily for forensic purposes and not as is commonly believed a dependent function that must be verified at the time of contract formation. This forensic value is highly important and as such commerce has developed a number of specific rules governing the evidential value of, and trust bestowed in traditional signatures.

In 1976 Diffie and Hellman[ 3 ] in their seminal paper proposed that it was possible through the use of public key cryptography for a person to digitally sign a digital document. Diffie and Hellman[ 4 ] had independently rediscovered the groundbreaking concept of public key cryptography. Public key cryptography was not only capable of solving the key distribution problem that had plagued conventional cryptographers for centuries but it could also be used to digitally sign electronic documents. Instead of encrypting a message with the public key of the intended recipient and thus securing confidentiality, Diffie and Hellman proposed that a plain text message could be encrypted using the sender's private key. The recipient of such an encrypted message who possessed the sender's corresponding public key would then be in a position to authenticate the signer.

Therefore, as the concept went, the receiver would allegedly be in the same position as a person receiving a physical document duly signed by the sender. In this paper we will show that a digital signature and a traditional signature are two very different constructs and as such need to be treated differently. In particular we will show that, in the physical environment, a signed document possesses not only integrity of the contents of that document but that the signature itself also possesses the element of integrity. The current commercial implementations of digital signature[ 5 ] and electronic signature [ 6 ] technology do not address the integrity of the electronic signature itself. We propose a solution that should be legally acceptable to the courts and to law enforcement agencies. Despite this issue being primarily of theoretical value, due to the fact that most jurisdictions do not impose a restriction on the use of cryptography for commercial confidentiality purposes, the authors submit that if the current liberal situation changed then the solution contained in this paper should be considered by legislators as a valid mechanism to provide the necessary integrity of digital signatures.

2. Prologue

In paper-based commercial transactions the traditional signature has established itself as a cornerstone for effecting such transactions. A set of well-defined rules governing the use of traditional signatures has developed over a substantial period of time. These rules are the foundation for the current established commercial legal infrastructure, but the use of electronic signatures, it is suggested[ 7 ], will challenge many of these well-established rules. It is proposed in this paper that new rules will be developed. The judiciary and commerce will only accept these new rules if electronic signatures possess characteristics that are no less than the minimum-security features possessed by traditional signatures. If an electronic signature does not possess these minimum features then it is likely that it will not enjoy the trust of commerce and the judiciary.

The origins of traditional signature recognition, usage and meaning are rarely considered, yet these origins appear to offer guidance for the digital age. According to one eminent authority[ 8 ]:

It is not unreasonable to expect that those entering into commercial transactions via electronic means will require assurances that the electronic signing of electronic documents will be no less secure than traditional processes. Without such assurances it is likely that people will not contract as freely electronically as they would otherwise do by conventional means in which they can repose their trust through the actual or perceived security of that process.

We have previously visited the topic of comparing traditional signatures to electronic signatures[ 10 ]. We concluded in our previous work that the trusted mechanism developed in the physical environment namely witnessing was not a mechanism that could be readily transposed into the electronic environment. This paper advances on our previous work by identifying that digital signatures that result from current commercial products are very insecure as compared to hand written signatures from an integrity and legal perspective. We propose an electronic solution to the lack of integrity of electronic signatures. Our solution does not prevent fraudulent false attribution but it does provide a mechanism to identify documents where an original electronic signature has been stripped from a document and substituted with a new electronic signature.  It is suggested that our solution is capable of assisting organisations that wish to build electronic lodgment facilities such as the US Patents office or Land Title agencies that may desire to implement an online conveyancing register for land transactions.

3. Traditional Signatures

In order to understand better the deficiencies of digital signatures as compared to traditional signatures it is necessary to appreciate the attributes of traditional signatures. Surprisingly, there has been very little published research on what a traditional signature is from a legal perspective[ 11 ]. There has been some historical research dealing with the concept of witnessing[ 12 ] and in particular notaries[ 13 ], but by and large it is a subject that appears to have been taken for granted or assumed.

The locus classicus in Australian judicial statements on the meaning of a signature appears in R v. Moore, Ex Parte Myers[ 14 ], where Higginbotham made the following comment:

This case raises three important issues, namely:

When an autograph is affixed to a document there is on the part of the signatory a lack of intention to be bound by the contents of the document or to be associated with the contents of that document. Hence, a mark on a document will not be regarded as a signature unless there is the necessary intention to be bound by the contents of the document or to be associated with the document[ 18 ]. The document also must be authenticated.

The Macquarie Dictionary defines 'authenticate' as 'to make authoritative or valid; to establish as genuine'[ 19 ]. Further the term 'valid' is defined in part as 'legally sound, effective, or binding; having legal force; sustainable at law'[ 20 ].

Hence, a signature, if properly executed, and there being no surrounding circumstances that legally vitiate the signature such as fraud, undue influence or unconscionable conduct, will bind the signatory to the contents of the document even if the signatory has not read the document[ 21 ].

A signature is capable of performing a number of functions, namely it can:

The general physical characteristics of traditional signatures are that they:

The general legal characteristics of a traditional signature are that:

Hence, an electronic signature should be capable of acceptance as a signature; if:

It is elements (d), (e) and (f) above that are the most problematical. As will be discussed more fully a digital signature is simply an extra set of bits that are attached to or logically associated with some digital document. As such they can be removed without trace of their prior existence. If the reader is not interested in understanding how a digital signature is formed then the reader can skip Section 4 and continue at Section 5.

4. Electronic Signatures

4.1 Synopsis

This part of the paper describes what an electronic signature means and that there exists a sub category known as digital signatures. This paper concentrates on digital signatures and identifies that a digital signature is simply a series of bits that are appended to or logically associated to a digital document, which is also simply a series of bits. The issue is that the digital signature can not be attached to a digital document in the same manner as a traditional signature.

4.1.1 Electronic Signatures

An electronic signature is any electronic mark that indicates the identity of some person who is being attributed as being the signatory. The difficulty with many electronic signature mechanisms is that they do not possess an adequately secure mechanism of authentication. This authentication not only relates to the authentication of the document but should also relate to the authentication of the person to be charged with being bound by the contents of the document. In non-face-to-face transactions the process of authentication is highly important. When a transaction is being effected in a face-to-face situation both parties are in a good position to identify each other and if, for example the transaction is a cash transaction then the seller of the goods is satisfied as soon as he/she has possession of the money. The buyer will or should at the time of the transaction also possess the goods or if there is a time delay in delivery of the goods the buyer will know where to attend if the goods are not forthcoming or are later discovered to be defective. Hence there is a simple mechanism of authentication of the parties to the transaction in a face-to face encounter. That is, the buyer is at the time of effecting the transaction in a position to identify the seller and the seller's location.  In a non-face-to-face transaction neither party will be in a position to properly identify the other unless the electronic signature mechanism being used securely authenticates each party to the other. In credit card transactions, for example, credit card companies assign greater risk to 'card not present' transactions, such as phone transactions and internet transactions, than that given to 'over the counter transactions', as indicated above. The maturest technology that provides the necessary security to achieve authentication is digital signature technology. The remainder of this paper will discuss the issue of affixing digital signatures and how to implement an integrity mechanism for the entire message which must include the digital signature, in an equivalent manner to that found in the paper based environment.

4.1.2 Digital Signatures

Diffie and Hellman[ 31 ] coined the phrase 'unforgeable digital signatures and receipts are needed'[ 32 ] within an electronic messaging system. This was apparently the first use of the term 'digital signatures' in the public literature. Diffie and Hellman stated that a public key cryptosystem comprises two keys:

which are mathematically related but it is computationally infeasible to determine one key from the other. Their work centered upon one-way functions that incorporated a trap door. The primary characteristics of a public key crypto-system are that for the message space {M} there exists:

Element (a) above provides that within the key space {K} there exists a pair of keys Ek and Dk such that they are the inverse of each other. If Ek is used to encrypt a message to give the ciphertext then Dk being the inverse of Ek must be capable of decrypting the ciphertext to reveal the original message in 'plaintext'.

Element (b) provides that the whole process must be computationally feasible by being easy to compute. That is, for every key (k) that is within the key space {K} and for every (M) that is within the message space {M} the encryption and decryption algorithm must be easy.

As stated by Diffie and Hellman element (c) is the property that allows one of the user's key pair to be made public without compromising the secrecy of the other key. Therefore, the signer can disclose the verification key to the world with the knowledge that such disclosure does not compromise the secrecy of the signing key. This is a primal element of digital signature technology. Provided only one person has the relevant private key then anyone who receives a message that has been digitally signed through the use of that private key will use the corresponding public key to verify that that particular private key was used to digitally sign the message. Ipso facto, the receiver is then in a position to identify the signer.

The fourth element (d) ensures that there must be a way to feasibly compute a key pair related to inverse transformations when no constraint is placed on either what the enciphering or deciphering mechanism is to be.

Diffie and Hellman did not provide a feasible solution to the public key problem though they did give a simple example based upon calculating the inverse of a matrix. The computational power to calculate the result of a vector through matrix transformation is N ² operations where N is the size of the matrix. If the matrix has an inverse then the computational power to compute the inverse is N ³ operations. As Diffie and Hellman observed this power differential is too small. If the computational power to calculate the inverse were N ¹⁰⁰ operations then it would be possible to say that it is computationally infeasible to calculate one key of the pair from simply knowing the other key of that pair.

Rivest et al[ 33 ] advanced the Diffie Hellman proposition by developing the first[ 34 ] publicly accepted and working public key crypto-system[ 35 ]. Rivest et al proposed as regards to signatures that:

Since Rivest et al there have been innumerable papers and articles concerning digital signatures and digital signature schemes[ 37 ]. To date, the vast majority of this material has concentrated on the technical aspects and not the legal, social or economic aspects of digital signatures.

In simple terms a digital signature is a cryptographic conversion of some data such that the encrypted data can be allegedly attributed to the holder of the private key used to perform that cryptographic conversion where the private key forms part of a public key pair.  The basic assumption behind digital signatures is that if only one person has access to the private key and an encrypted document can only be decrypted using the corresponding public key then the encryption process must have occurred through the use of such private key, which means that is was the holder of the private key who encrypted the document. Consequently, the identity of the signatory of the electronic document has been revealed. As will be discussed further in this paper this does not mean that attribution has been achieved. 

A major issue in using public key crypto-systems is that they are substantially slower than symmetric key crypto-systems[ 38 ]. When Diffie and Hellman first proposed the use of public key crypto-systems as a method of digitally signing documents they were anticipating the encryption of the entire document through the use of the private key. Essentially the entire digital document acts as the digital signature. In doing so each message is broken up into manageable blocks that are equal in size to that of the signing key[ 39 ]. This is a novel proposition in that a traditional signature is affixed at some place on the document. The document does not become converted into the signature.  To overcome the slowness of public key cryptography for signing purposes, Rivest proposed a mechanism known as hashing.

4.2 Hashing Algorithms

The purpose of the hashing algorithm is to produce a message digest of the document. A message digest is sometimes called the fingerprint of a document and is much smaller in size to that of the original document. There are a number of one-way hash algorithms currently being used such as MD5[ 40 ] and SHA-1[ 41 ]. MD5 produces a message digest that is 128bits long whereas SHA-1 produces a message digest that is 160 bits long.

All hash algorithms have the following characteristics:

This issue of collision free is very important because as will be detailed below it is the hash that is operated on by the public key crypto-system. If two documents possessed that same hash then the digital signature of one document could be uplifted and inserted into the other document without affecting the integrity of the document. Furthermore, the false digital signature would be verified as a valid digital signature. Dobbertine[ 43 ] identified a flaw in the hashing algorithm MD4 which was a precursor to MD5 as not being collision free.

In fact Dobbertine was able to show two contracts that were simply different as regards to the amount to be paid under them. In contract 'A' the amount was $176,495 and in contract 'B' the amount was $276,495. There were no other difference specified in the contract. As can be seen the difference in liability is $100,000. The digital signatures were the same because the hash of each document was the same.

The entire exercise of affixing a digital signature is as follows:

The digital signature is then either appended to the file containing the DOC1 or can be sent separately to the recipient[ 44 ]. Therefore, a digitally signed document comprises the message and the digital signature which is in essence is a series of bits[ 45 ] known as the digital signature concatenated to another series of bits known as the message.

This is very different to what occurs in the physical environment where the traditional signature and the document become one indivisible artefact. In the physical environment, in order to remove a signature and replace it by another signature, the signed document would have to be mutilated by physically cutting the document so as to separate the traditional signature from the document and then have the traditional signature affixed by a paper clip to the document or for the traditional signature to be affixed on a separate piece of paper and for that separate piece of paper to be attached by a paper clip to the document. A traditional signature has all the characteristics of a classical one-way function in that it is easy to process in one direction but very difficult to reverse the process, i.e. easy to affix, difficult to remove. The analogy to a paper clip being used to affix a digital signature is apt because the clip can be removed without leaving a trace in the same manner that a digital signature can be removed from a digital document without leaving a trace. This clearly does not occur in the physical word. It is absurd to think that business would rely upon paper clip technology as a basis for securing a signature to a document. But this is what is being suggested through the use of digital signatures.

The process to verify the digital signature is as follows:

A comparison of Message Digest (a) and Message Digest (b) will reveal two factors associated with the document. If the Message Digests are the same then the recipient knows that:

Provided the sender is the only person who has access to the private key then it must have been the sender who encrypted the associated Message Digest(a). This is because the public key used by the receiver to decrypt the digital signature could only correctly decrypt a digital signature that had been encrypted using the private key associated with the key pair. The main assumption here is that the sender has not compromised the private key.

As can be seen from the above exercise a digital signature will be different for each document because the private key is used to operate on the message digest which in turn results from the operation of the hashing algorithm on the original document.

Hence the general physical characteristics of digital signatures are that they:

In summary, public key crypto-systems are basically block ciphers that break up a message into manageable blocks, which are individually operated on through the use of one of the key pairs. If the exercise is to digitally sign a document then the private key is used in the operation. Because public key crypto-systems are substantially slower than symmetric key crypto-systems, the message is for digitally signing purposes first operated on by a one way hash function, which will calculate the fingerprint of the document. The fingerprint will normally be either 128 bits long or 160 bits long depending on the algorithm used. Further this is all possible because every message is expressed within a computer as a binary string and as such each character can be concatenated so as to produce a large bit string. It is this bit string that is broken up into blocks and operated on as if it were a series of numbers and not a character. Each of the mathematical algorithms above process whole numbers for encryption purposes.

5. The Right of Attribution

5.1 Synopsis

This part describes a new protocol that will place a recipient of a digitally signed document in the same position as the recipient of a physical document, which has been altered by changing the signature on the document. In the paper based environment the recipient will usually be able to identify if the signature to the document has been changed. This protocol is to provide a functional equivalent conclusion for the benefit of the recipient of a digitally signed document.

5.1.1 Signature Stripping

As stated above a digital signature is simply a set of bits that are attached to or logically associated with a digital message. They can very easily be removed by a fraudulent third party without leaving a trace. The issue is: 'why would someone want false attribution to a message'?[ 47 ]

If you can imagine an online lodgment service where legal rights are created or granted upon the lodgment of documents then by deleting the rightful signature and replacing it with another signature the person identified by the replaced signature will be attributed as the rightful beneficiary of such legal rights. Such a realistic situation arises with the online lodgment of inventions with the Patents Office. The inventor or the rightful owner of the invention is required to sign the application form. Provided the invention meets the legal requirement of registration, the patent rights will be granted to the party noted as the applicant. That is the party who signed the application form. The same could also be said for online land transactions. If an agency established an online lodgment facility then the noted purchaser will be registered as being the rightful proprietor of the land title.

The problem is that in the paper based environment there exists through the physicality of the signature and the document an automatic integrity mechanism relating to the signature itself. As stated above it is very difficult for a signature to be removed without leaving a trace. It is in essence a one way function. If on the face of a document there is evidence of tampering then the recipient can not simply rely upon the document but has a duty to make enquiries as to the authenticity of the document and in this case, the signature. Therefore the issue in the digital environment is:

Hence, the recipient of a digitally signed document must at a minimum be placed in the position of being able to determine whether or not a digitally signed document has a substituted digital signature attached to it. If the recipient can make such a determination, then, if a substitution has occurred, the entire veracity of the document must be questioned[ 48 ].

5.2 Digital Signature Integrity

One of the benefits of a digital signature is that it provides an integrity mechanism for the contents of the document but it does not provide an integrity mechanism for the digital signature itself, when considered in relation to conventional documents whereby the signature and document become one indivisible whole.

Stinson[ 49 ] proposes that the digitally signed document could be encrypted using the intended recipient's public key. That is given the message x, the sender would compute the digital signature ds = sig _sender (message), and then encrypts both the message and ds using the receiver's public key; Z = Epr(ds, message). The difficulty with this solution is:

Points (a) and (b) can easily be overcome by encrypting the message M and ds using a symmetric key function and then encrypting the symmetric key using the receiver's public key. That is the sender selects a symmetric key (k) and encrypts M and ds obtaining Z=Ek(M,ds). The sender also encrypts the symmetric key using the public key of the recipient and obtains Y=Epr(k). The sender forwards to the recipient both Z and Y. The recipient first decrypts the symmetric key using his/her own private key and then proceeds to verify the digital signature.

If encryption technology is illegal then what mechanism can be used that can give the required integrity over the entire document which must include the digital signature? This is not a trivial task. For example the following protocol at first analysis appears to be a method of providing integrity of digitally signed documents inclusive of the digital signature.

By hashing the aggregate of the message and the digital signature the sender has captured the desired fingerprint in X.

The sender then forwards a new message comprising (Y, X, S, R) to a trusted third party who time stamps (Y, X, S, R) and places (Y, X, S, R, T) in a secure public directory that has read capability to all but restricted write, amend and append capabilities.

S then sends M and ds to R. R will upon receipt of M and ds calculate:

But if S's signed message M is captured and ds is deleted and substituted by ds' then there nothing to stop the interceptor C from altering the documents form but not it's substance. If C adds a space or some punctuation like a comma or a dash then the documents substance is maintained but h(M') will be substantially different to that of h(M). Hence the storage of h(M) for the benefit of R will be insufficient. S needs to send (S,R,h(M,ds)) to the trusted third party.

This should be done at a minimum using a three way handshake as follows:

Figure 5: Three way hand-shake

In this figure S has digitally signed a message and has attempted for forward it to R but C has intercepted the message and has stripped S's digital signature and substituted his/her own digital signature. The following three-way hand shake is recommended:

The protocol detailed above can be classified as a active protocol as it requires TTP to notify R on receipt of a message from S. If R does not receive a message from S shortly thereafter then R should activate a train of enquiry so as determine the status of the missing message. Alternatively the protocol could be made into a passive protocol. In this situation when R receives a message from C, R will look up the TTP's public directory and extract all recent records that exists under his name. If no record is recovered that identifies S as having sent a message to R then R should initiate a train of enquiry as to why he/she has not received a message from S.  R should request S to re-send the original digitally signed message M. The time stamping by the TTP will identify who was the first person to sign the correct document.

The above protocol does use encryption but it is not for confidentiality of plaintext document but for security of the hash of the aggregated message and digital signature. As can be seen for jurisdictions where the private use of encryption for confidentiality purposes is illegal[ 50 ], the digital signature integrity protocol involves substantial overhead and the involvement of a trusted third party. Such trusted third parties could be certification authorities, which adds to their business operations and therefore their revenue mechanism.

Many of the electronic lodgment systems involve government agencies like patent offices and land title offices. Since the encryption is required between the agency and the private citizen then such communication can be encrypted because the agency can decrypt the digitally signed message. Between private citizens in jurisdictions where it is illegal to encrypt messages. We submit that a trusted third party system should be utilised. Of course the cost of implementing such a system may outweigh the benefit for all messages and there may only be value in business to business communications.

6. Conclusion

There is a clear and fundamental difference between a traditional signature and a digital signature. In this paper we have identified a fundamental flaw with digital signature technology in that the digital signature itself in not securely attached to a document so as to create one indivisible artefact.  It is technically possible to better secure the attachment of a digital signature to a digital document by encrypting the digitally signed document but in some jurisdictions the use of encryption technology for confidentiality purposes is illegal.

We put forward that in order to have integrity of the entire message which includes the digital signature then the message and the digital signature should be concatenated and the hash of the concatenation should be lodged with an independent trusted third party who will time stamp the lodgment of the hash.  This solution provides an added business opportunity for trusted third parties in providing digital signature integrity and emulates in some way the operation of a notary.

Footnotes

1 . A longitudinal contract is a contract, where performance is not completed at the time the contract is formed. It is not unusual that at the time of contract formation, that is at signing, the signatures are not verified as to authority or identity. Of course if the signatory does not have the appropriate authority then the signatory could be liable for breach of warranty of authority. For example, in a contract for the sale of land it is usual for the vendor and the purchaser not to be co-present at the time of signing. In Australia and as far the authors understand, in the USA and the UK, the real estate agent organises the purchaser to sign in duplicate the land sale contract. The real estate agent then proceeds to present to the vendor the purchaser's offer. If the vendor accepts the offer then the vendor will execute/sign the land sale contract in duplicate. At no time do the signatures of either party come into question unless a dispute arises. At that point in time the relevant signatures are important for forensic purposes so as to ensure that the statute of frauds has been complied with.

2 . An instantiated contract is a contract that is dependent upon the verification of signature before the contract proceeds or is even formed. A signature by itself is insufficient. The verification process is an important aspect in the formation of the contract. Commonly, such contracts are completed at the time of signature verification. An example of this is a credit card transaction that involves the purchase of goods. There are in fact two transactions. The first transaction is the written signature verification process, which is a precondition to the provision of the relevant credit. The second transaction is the actual transfer of title between the purchaser and the merchant. The second transaction is dependent upon the completion of the first transaction.

3 . Diffie W, and Hellman M, (1976) 'New Directions in Cryptography', IEEE Transactions on Information Theory, Vol IT 22, No. 6 November.

4 . Singh S, (2000) 'The Code Book - The Science of Secrecy from Ancient Egypt to Quantum Cryptography', Anchor Books.

5 . As discussed further in this paper in greater detail a digital signature is capable of providing message integrity and authenticates the signatory.  It is created by first hashing the relevant message and then encrypting the resulting hash through the use of the sender's private key and a public key crypto-system.

6 . In this paper we make reference to digital signatures and electronic signatures. A digital signature is a subset of electronic signatures that is really a term of art, which involves the use of public key cryptography. An electronic signature is simply a set of bits that can signify the alleged identity of the person who is intended to be bound by the contents of the document.

7 . US Department of Commerce (2000), 'The Digital Economy', June < http://www.esa.doc.gov/de2000.pdf >.

8 . Barnes H E, (1890) 'History of Historical Writings', (New York: Second Revised Edition, Dover Publications Inc).

9 . ibid. p.10.

10 . McCullagh A, Little P, Caelli W, (1998) 'Electronic Signatures - Understand the Past to Develop the Future' 1998 UNSWLJ 200.

11 . ibid 10.

Reed C, 'What is a Signature?', 2000 (3) The Journal of Information, Law and Technology (JILT) < http://elj.warwick.ac.uk/jilt/00-3/reed.html/>.

Kaufman Winn, J, 1998 'Open Systems, Free Markets, and Regulation of Internet Commerce', 77 TLNLR 1177.

Aalberts, B,a nd van der Hof, S, 'Digital Signature Blindness' < http://rechten.kub.nl/simone/ds-fr.htm >.

Scoville, A, 1998 'Clear Signatures, Obscure Signs', 17 Cardozo Arts and Entertainment Law Journal 345.

12 . Holdworth W S, 'History of English Law' Vol II page 29, pp78 - 87, pp 107-108; Vol III page 231;Vol IX pp 167 - 211,

John H. Wigmore 'Evidence in Trials at Common' Vol 10 Revised James H. Chadbourn, Little Brown and Company 1974 at chpt 42 and chpt 52.

13 . Ready N P, 1992 'Brooke's Notary' (eleventh edition London, Sweet & Maxwell).

14 . (1884) 10 VLR 322, This case dealt with a pawn-broker's pledge ticket that was not signed by the pawn-broker in accordance with the relevant legislation but was signed by an authorised agent even though the name of the pawn-broker was printed on the pledge ticket.

15 . See Lazarus Estates Ltd v. Beasley [1956] 1 All ER 341 where Denning LJ (as he then was) made the following comment in relation to a company stamp:

'The statutory forms require the documents to be 'signed' by the landlord, but the only signature on these documents ( if such it can be called) was a rubber stamp 'Lazarus Estates, Ltd', without anything to verify it. There was no signature of a secretary or of any person at all on behalf of the company. There was nothing to indicate who affixed the rubber stamp. It has been held in this court that a private person can sign a document by impressing a rubber stamp with his own facsimile signature on it. .. , but it has not been held that a company can sign by its printed name affixed with a rubber stamp.'

As for the position in the United States of America see Joseph Denunzio Fruit Company v Crane 79 F. Sup. 117 (D.C. Cal 1948) where the Court made the following comment:

The Court must take a realistic view of modern business practices, and can probably take judicial notice of the extensive use to which the teletype machine is being used today among business firms particularly brokers, in the expeditious transmission of typewritten messages. No case in point has been called to the Court's attention on this particular point and a diligent search of the authorities has failed to uncover a status of teletype machines as satisfying the California Statute of Frauds. The point appears to be res nova but this Court will hold that the teletype messages in this case satisfy the Statute of Frauds in California.'

See also Smith v Greenville County 188 SC. 349, where it was held:
'A signature may be written by hand, printed, stamped, typewritten, engraved, photographed or cut from one instrument and attached to another, and a signature lithographed on an instrument by a party is sufficient for the purpose of signing it: it being immaterial by what kind of instrument a signature is made.'

16 . But see: In. re Waldick Aero-space Devices Inc. 73 B.R. 932 where the court commented that a financing statement containing debtor's typewritten name and incorporating by reference an attached equipment lease signed by debtor satisfied signature requirement for perfection of security interest in equipment.

17 . See also Hucklesby v.Hook (1900) 82 L. T. 117 where Buckley J held that a printed name in the body of an instrument, in order to operate as a signature must be authenticated by the person to be charged.

18 . Further, the mark of a witness does not carry with it the necessary intent to be bound by the contents of the document. Thus, the witnesses are usually designated as such so as to overcome any confusion as to who is to be bound by the contents of the document.

19 . Websters Dictionary defines 'authenticate' in similar terms as does the Oxford dictionary.

20 . Websters Dictionary defines 'valid' in similar terms as does the Oxford dictionary.

21 . L'Estrange  v. Graucob [1934] 2 K.B. 394; For a critical analysis of this case see J. R. Spencer, 'Signature, Consent, and the Rule in L'Estrange v. Graucob' [1973] CLJ 104.

22 . A clear point in this regard is the signature of a witness. A witness does not through the act of affixing a signature become bound by the contents of the document. Rather their primary function is to validate or provide corroborative evidence in relation to the signing of the document by the persons to be so bound. In relation to artificial persons such as companies it is usual for the affixing of the company seal to be witnessed by two authorised persons usually a director and the company secretary. Only in exceptional circumstances do witnesses, through the act of witnessing the affixation of the company seal, become bound by the contents of the document.

23 . Planning of Future Work on Electronic Commerce: Digital Signatures, Certification Authorities and Related Legal Issues; UNCITRAL Working Group on Electronic Commerce, Thirty- sixth session, New York, August 2000 A/CN.9/WG.IV/WP.86.

24 . Hagan 1894 'Disputed Handwriting' Bank Brothers Sweet & Maxwell.

25 . According to Dr. Ed Gerk it is nevertheless, possible to remove a traditional signature without trace through the use of specialised laser technology. The cost involved is substantially greater than the cost of removing a digital signature from an electronic document that could require at a minimum a text based editor. (Personal email with Dr. E. Gerk, which is kept on file).

26 . Blackstones commentaries, Book II, Ch 20 at 305 :

'...we are assured by all our ancient historians, that sealing was not then in common use. The method of the Saxons was for such as could write to subscribe their names, and, whether they could write or not, to affix the sign of the cross: which custom our illiterate vulgar do, for the most part, to this day keep up, by signing a cross for their mark, when unable to write'.

27 . Geary v Physic [1826] 5 B&C 234, 238 per Bayley J.

28 . Cohen v. Roche [1927] 1 K.B. 169,175, per McCardie J.

29 . This can be imputed depending on the circumstances. For example, if the document is a commercial document then the law imputes such intention even if the signer did not read the document or understands the contents of the document. See L'Strange v. Graucob opcit note 21.

30 . The rational for this procedure is to ensure that no one can easily interleave pages into the WILL or substitute pages of the WILL. This is a partial integrity mechanism for each page that forms part of the entire document. In some jurisdictions it is not uncommon for attorneys to insist upon all pages to a written contract to be initialed by all parties to the contract. As far as the authors are aware there is no legal obligation to do this. It is a custom that some attorneys have adopted.

31 . Diffie W and Hellman H, 1976 'New Directions in Cryptography' IEEE Transactions on Information Theory, IT-22(6): 644 - 654, November.

Actually, Diffie and Hellman had exposed the concept of public key cryptography in an earlier paper entitled 'Multiuser cryptographic Techniques': In Proceedings of AFIPS National Computer Conference, pp 109-112, AFIPS, 1976.

32 . ibid. p 647.

33 . Rivest, R., Shamir, A., and Adleman, L., (1978) 'A Method for Obtaining Digital Signatures and Public Key Cryptosystems'; Communications of the ACM, 21(2):120-126, February.

34 . It has now been disclosed that the United Kingdom spy organisation GCHC has developed public key cryptography in the early 1970's, some 7 years before Diffie and Hellman had published their findings. Singh, S., (2000) 'The Code Book - The Science of Secrecy from Ancient Egypt to Quantum Cryptography', (Anchor Books).

35 . Public key crypto-systems also commonly referred to as asymmetric crypto-systems.

36 . As to whether a recipient can prove this to a judge is very problematical. See McCullagh A, and Caellli W, 2000 'Non Repudiation in the Electronic Environment' First Monday, 5(8),
< http://www.firstmonday.org/issues/issue5_8/mccullagh/index.html >

37 . There are currently 3 acceptable families of public key crypto-systems:

Integer Factorisation - the RSA system see op cit. note 33;

Discrete Logarithm in a finite field - the El Gamal discrete logarithm system see : El Gamal, T, (1985) 'A Public Key Crypto-system and Signature Scheme Based on Discrete Logarithms', IEEE Transactions on Information Theory, vIT-31, No. 4, July, 1985 pp469-481;

Discrete logarithm in an Elliptic curve - Elliptic Curve Cryptography see Kolbitz N. (1987) 'Elliptic Curve Crypto-systems' Mathematics of Computation 1987 V. 48 pp. 203 - 209

38 . Meneze A, Van Oorschot P., Vanstone S, 'Handbook of Applied Cryptography' CRC Press 1996 at page 283.

39 . RSA, El Gamal and ECC crypto-systems are all block ciphers see respectively: op. cit note 33; op cit. note 37; op cit. note 37.

40 . Rivest R, 'The MD5 Message Digest Algorithm', RFC 1321 April 1992 < http://www.ietf.org/>.

41 . National Institute of Standards and Technology, NIST FIPS PUBS.180 - 'Secure Hash Standard, US Department of Commerce, May 1993.

42 . Prior to MD5, Rivest had developed a hashing system known as MD4. But Hans Dobbertin showed that MD4 was not collision free. See Dobbertin H, (1996) 'Cryptanalysis of MD4' Fast Software Encryption, Dietre Gollman (ed) Lecture Notes in Computer Science v1039, p. 54, 1996.

43 . ibid at p. 65.

44 . In PGP the Digital Signature can be forwarded to the intended recipient in a separate file to that of the document. See PGP Windows 95, 98 and NT - PGP User's Guide Version 6, 1998, Network Associates Inc. < http://www.nai.com >.

45 . A bit is represented as a '0' or a '1'. Computers work within the binary (base 2) number system. As such the atomic notation for computers is bits.

46 . In much of the literature it is stated that the verification process proves the identity of the signer. This is actually not correct because the process does not prove who signed. It simply proves which private key was used. The identity of the signer is based upon the presumption that the signer is the only person who access to the private key.

47 . Abadi M, (1998) ' Two facets of authentication '. In 11th IEEE Computer Security Foundations Workshop, pages 27-32. IEEE Computer Society, June 1998, Also appeared as SRC Technical Note 1998-007.

48 . The Issue of a substituted signature occurs when the sender does not deny the digital signature but the recipient has evidence that identifies that a substitution has taken place. This ss different to the case where the sender denies the digital signature, In which case the recipient has the onus of proof in showing that the affixed signature is that of the sender;
See McCullagh A and Caelli W, 'Non-repudiation in the digital environment',
< http://www.firstmonday.org/issues/issue5_8/mccullagh/index.html >.

49 . Stinson D, (1995), Cryptography:Theory and Practice (Discrete Mathematics and Its Applications)  CRC Press 1995, page 204.

50 . For a detailed analysis see Bert-Jaap Koops site where he details various jurisdictions that the make it illegal to use encryption technology for confidentiality purposes either absolutely or requiring a license to use same. For example 'The Peoples Republic of China', 'Russia', as well as others. < https://cwis.kub.nl/~frw/people/koops/lawsurvy.htm >.