[niklaslogren]

The "digital signature" description gives the impression that the signed message is encrypted with the private key and later decrypted with the public key.

Is this how message signing works in reality? I had a different mental model.

[goykasi]

They are separate operations.

  - encrypt with public, decrypt with private
  - sign with private, verify with public