This invention discloses a method of authenticating a signature of a message m comprising the steps of determining a hash h(m) of the message by application of a hash function and deriving therefrom a first signature component. The signor then computes a function mathematically related to the hash of the message and applies the function to the message to obtain a second signature component, bound to the signatory. The signature components are forwarded to a recipient. The recipient then recovers from one of the signature components a message m' and computing a value of m' by applying the hash function, and determining if the value of m' and the hash h(m) embodied in the first signature component are identical whereby identity indicates an authentic signature of the message.