 RSA signature

A signature based on private RSA cryptosystem exponentiation, with public exponentiation used for verification. Textbook $s=m^d(\mathrm{mod}N)$ is multiplicatively forgeable; a secure scheme requires an appropriate encoding and message digest rather than raw message exponentiation.