The process of generation and verification of digital signature requires considerable amount of time.
I doubt this claim:
- Currently used cryptographic hashes are designed to be fast.
- Data can be feed into the hash in pieces: one does not need to keep all the data to be signed in memory but can feed the data into the hash piece by piece for example while doing other kind of processing with the data which are usually more expensive than the hashing (like streaming on a network, copying it, transforming it for transport...).
- Hashing does not need much memory, i.e. it only needs a constant amount of memory no matter how much data you include the hash.
- The final signature only involves (more expensive) cryptographic operations over the small hash no matter how much data need to be signed and is thus fast too.
So, for frequent exchange of messages the speed of communication will reduce.
The only kind of expensive step is creating the final signature using the private key, the hashing itself is cheap. Still lots of signatures can be created in a short time with common hardware and if this is needed the other processing during communication (i.e. transport over network) is probably more significant for performance than the signing process. For example each full TLS handshake (i.e. HTTPS) is creating and validating digital signatures and still the performance of the connection is bound primarily by the latency of the network and also the key exchange, but not by creating or validating digital signatures.
It can be expensive though if lots of small data need to be signed - in this case aggregating the data and signing together might be done depending on the use case.
And it can be slow if slow hardware is used, like for example smartcards protecting the private key. In this case the hashing is usually done outside this hardware and the slow hardware is only used for the ultimate signing of the small hash. When using a smartcard for signing a high performance is usually not required. The user has to put the smartcard first into the smartcard reader anyway and maybe unlock it with a PIN so the additional slowness of the smartcard is not that relevant compared to the slowness of this whole process.
And noticed there are commercial digital signature providers ... How they overcome the slow process of verifying digital signature?
The site you reference does not do any digital signing at all. They do offer certificates which can be used for digital signing though - nothing special and not different to what others offer. The signing is still done by the user itself by using the (secret) private key owned by the user.
