Cryptographic trust

Cryptography moves trust rather than creating it.

Verifying a signature means trusting the key. Trusting the key means trusting whoever vouched for it. That chain always ends somewhere human: a list shipped with your device, a fingerprint somebody read out, a certificate authority's procedures. The maths is exact and the thing it is anchored to is a decision somebody made.