public key infrastructure for signatures