How digital signatures work in Groove (915552)

MORE INFORMATION

Groove uses key-based cryptography for user authentication. Every Groove identity is represented by a private/public key pair. The private key is stored in the password-protected account file. The public key is shared with anyone that you interact with in Groove.

In this cryptographic method, Groove uses the private key of the active account to sign any messages. Messages include invitations and acceptances for workspaces. Groove then sends the message and the digital signature to the recipient. The receiving Groove program uses the public key of the sender to verify that the message is generated by the account that has the corresponding private key.

Even if the sender's private key matches the known public key, this does not guarantee the identity of the sender. To authenticate the sender's identity, Groove uses a digital fingerprint. For more information about authenticating contacts, see the "Manage Contacts" section of Groove User's Guide.