<Signature>
<SignedInfo>
(CanonicalizationMethod)
(SignatureMethod)
(ObjectReference)+
</SignedInfo>
(SignatureValue)
(KeyInfo)?
(Object)*
</Signature>
SignedInfo
is the stuff that is signed.
ObjectReference
s identify the resources that the have content being signed
(via a DigestValue
)
- Other
KeyInfo
and Object
s may be included within the Signature
element.