Secure signatures without a private key

The article presents a cryptographic technique for creating signatures in build artifacts that are both secure and reproducible without exposing private keys. Using ECDSA public key recovery, this solves a fundamental conflict between reproducible builds and cryptographic signing. The technique has practical applications in confidential computing and remote attestation, particularly for AMD SEV-SNP ID blocks.