A method of protecting the privacy of a signature that may be used in, for example, a vote by mail system, that includes creating a distorted version of the registration signature, storing the distorted version of the registration signature, and storing a mechanism for converting the distorted registration signature into an undistorted registration signature. The stored mechanism may later be used to reverse the distortion so that the undistorted signature can be used in a verification process.