Signature Format Type Constants specify the resulting
format of the signed document.
SignatureFormat_SignedHash
(1) – Signed hash. The digital signature of the file is generated by
first calculating the hash of the file and the hash is then signed.
The digital signature is separate from the signed file and therefore both
the digital signature and the file are required when verifying.
SignatureFormat_SignedData
(2) – Signed-data content type. The digital signature of the file is
generated and encoded to the SignedData format. The digital signature
embeds the file such that one file contains both the digital signature and
the file that was signed. When verifying, only the digital signature
is required.
SignatureFormat_SignedData_Detached
(3) – Detached signed-data content type. The digital signature of
the file is generated and encoded to the Detached SignedData format.
This is the same as the signed-data content type but only the signed file is not
included in the signature. Because the digital signature is separate
from the signed file, both are required when verifying.
For additional information on the signed-data content type, please refer to RFC 2315: PKCS #7: Cryptographic Message Syntax
Version 1.5.