To determine the identity of the entity that signed a message (entity authentication), or to verify that a message was not altered (data authentication).