I understand how RSA can be used for message encryption:
- Alice wants to send a message to Bob.
- Bob generates a public key $(n, e)$ and private key $d$; he keeps the private key for himself only, and sends the public key to Alice.
- Alice encrypts the message with the public key.
- Alice sends the encrypted message to Bob.
- Bob can decrypt it with the private key.
- Eve who stole the encrypted message (but who has not the private key) cannot decrypt it.
Can we describe a similar situation (in Layman's terms, with two people and a third malicious person) to explain how RSA can be used for message signature?
Note: My problem is not the maths (I studied RSA and understand the maths in it) but more an example of situation showing how signature works.