Hope it will be clear.
I need to digitally sign pieces of information. What I'm currently doing is the following (for each piece of information):
- Run SHA1 on the information
- Encrypt the result with RSA
- Store both of them together Now, I can say for sure if someone altered the information.
My problem is that I don't want to run the RSA encryption on each one of the pieces since it has some performance hit on my system.
I thought of doing the following:
- Generate a seed for the SHA1
- Encrypt the seed with RSA
- Store the encrypted seed.
- Now I can only run the SHA1 (+seed) on each piece of information.
I don't find any reason for why it should be less safe than what I'm doing today. Is it true? any thoughts about it?