Yep. The signing is done with public/private (aka asymmetric) keys and some kind of hashing mechanism.