Protocol for Sending a Signed Message M'

• Alice computes digital signature $\sigma$ = S_A(M').
• Alice sends (M', $\sigma$) to Bob.
• Bob checks that M' = P_A($\sigma$) = P_A(S_A(M')) = M'.
• Message M' is not encrypted.