The signatures are used to authenticate that the updates come directly from Microsoft and were not tampered with during delivery. To help protect the security of the Windows operating system, updates were previously signed (using both the SHA-1 and SHA-2 hash algorithms).