Skip to main content

Separate keys for encryption and signatures


The system must use asymmetric cryptography with separated keys for encryption and signatures.


The key used for encryption is responsible for ensuring the confidentiality of data. By keeping the encryption key separate from the key used for signatures, the system ensures that compromising one type of operation (decryption) does not automatically compromise the other (signature verification). Additionally, separating keys simplifies key management. Each key pair has a specific purpose, and their roles are clearly defined.

Supported In​

This requirement is verified in following services




free trial

Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.