A security engineer is deploying a remote access VPN and wants to eliminate the risk of shared or reused credentials. The organization already operates an internal PKI. The engineer configures the VPN gateway to require that each connecting client present an X.509 digital certificate issued by the corporate CA, and the gateway validates the certificate chain and checks revocation before granting access. Which cryptography function is being used to authenticate the user in this design?