Ok, with RSA the signature is a number modulo n, where n is one of the numbers of the key. So with RSA the size of the signature is the same as the size of n. Correct? Stef