Glossary: Modern Vulnerabilities, Malware and Physical Attacks

Signing key

Also written: signing keys

The private key an identity provider uses to sign tokens. With it, an attacker can forge valid tokens for anyone, as Storm-0558 did.