Which algorithm was the first to be found suitable for both digital signing and encryption?