Home  /  Information Technology Act  /  Section 3

Section 3: Electronic signature

Information Technology Act • Official Statutory Text & Practice Guide

Statutory Regulation
Legal Standard
Competent Court / Tribunal
Act 2000
Section 2 All 90 Sections of Information Technology Act Section 4

Legal Commentary & Landmark Judgments: Section 3

Section 3 sets out the statutory framework for the authentication of electronic records using digital signatures, establishing the legal mechanism of asymmetric cryptosystems and hash functions to guarantee source authenticity and message integrity.

  • Asymmetric Cryptosystem Architecture: Requires authentication through a mathematically paired public key and private key, where the private key creates the digital signature and the public key verifies it.
  • One-Way Hash Function Integrity: Mandates the application of a secure mathematical algorithm producing a unique message digest, ensuring that any subsequent alteration of the underlying record invalidates the signature.
  • Algorithmic Verification Standard: Stipulates that verification requires confirming that the initial electronic record was signed using the private key corresponding exactly to the signer's verified public key.
Key Landmark Precedents:
  • Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020) 7 SCC 1: Three-Judge Bench of the Supreme Court held that electronic records authenticated in compliance with Section 3 carry statutory authenticity, reinforcing mandatory compliance with Section 65B of the Evidence Act.
  • Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473: Supreme Court affirmed that electronic evidence and cryptographic signatures must satisfy statutory authentication mandates under the IT Act to displace the common law best evidence rule.
  • State (NCT of Delhi) v. Navjot Sandhu (2005) 11 SCC 600: Supreme Court expounded on the technical mechanics of public-private key cryptography and hash values in securing unimpeachable digital audit trails.
Courtroom Practice & Strategic Litigation Guidance:

When challenging or relying on an electronic record, produce the cryptographic hash verification log alongside the public key certificate to demonstrate complete mathematical integrity under Section 3, pre-empting claims of digital fabrication or packet modification.

Section 2 All 90 Sections of Information Technology Act Section 4