Sign a container and embed the SEAL record.
Two-pass: the signature is computed over the final file geometry with the signature value itself excluded (b="F~S,s~f"), so a placeholder record is embedded first, digested, then re-embedded with the real signature.
Sign a container and embed the SEAL record.
Two-pass: the signature is computed over the final file geometry with the signature value itself excluded (b="F~S,s~f"), so a placeholder record is embedded first, digested, then re-embedded with the real signature.