Undoubtedly true, assuming you use something well-scrutinized like signify or gnupg for that signature verification.