Secondly, it should be computationally infeasible to generate a valid signature for a party who does not possess the private key.
It would be impossible for a computer that does not have the security code to create a valid key.