I'm new to the world of digital signatures and encryption and I'm trying to learn more.
I was wondering, how or if an authentication process (login or sign-in) can be performed using a digital signature or not.
I've thought of a scenario in which:
A user creates login credentials (username, password and PIN code). The password and PIN are used to create a private key.
The user tries to login via username & password. The password is compared to the one stored in the database and used to generate a key, which is also to be compared. If both match, then the user can login.
Does make any sense or should a public key be used?