A digital signature scheme is equivalent in every way to a basic electronic signature

A digital signature scheme offers a stronger notion of security than a message authentication code (MAC)

We should always use a digital signature scheme over a message authentication code (MAC) in every application since the former provides a stronger notion of security than the latter

If Alice wants to digitally sign a document using a digital signature scheme, then she needs to use her public key

In general, anyone can verify the authenticity of a digital signature for a particular document

What are the properties of a digital signature scheme?

If Alice wants to sign a message and then submit the digital signature to Bob, then Alice needs to sign the message using

If Alice wants to encrypt a message using a public key cryptosystem and then submit the ciphertext to Bob, then Alice needs to encrypt the message using

A digital signature scheme with appendix requires the signed message to be appended with the signature

Data to be signed must always be encrypted to protect its confidentiality

When using RSA digital signature with appendix, it is optional to apply the hash function to the message. In general, there are no security implications of directly signing the message without first hashing it.

An existential forgery means

Assume we are using an RSA digital signature scheme with message recovery. If the RSA modulus is 2048 bits long, then we can use this scheme to sign any message exceeding this length

A digital signature scheme with message recovery additionally provides confidentiality since the message is not sent along with the signature