diff --git a/book/source/06-signatures.md b/book/source/06-signatures.md index fe1af12..078fe2c 100644 --- a/book/source/06-signatures.md +++ b/book/source/06-signatures.md @@ -21,7 +21,8 @@ For the purpose of this document, the term signature will refer to OpenPGP signa ```{admonition} VISUAL :class: warning -show our visuals for these two layers of meaning: +show our visuals for these two layers of meaning? + - "sig-circle", vs - box with yellow tag-thing, including sig-circle ``` @@ -53,6 +54,13 @@ As outlined above, an OpenPGP signature is a composite data structure, which com - Most of this metadata is encoded as so-called "subpackets," see {ref}`signature_subpackets`, - A raw cryptographic signature. + +```{admonition} VISUAL +:class: warning + +show a version of our "yellow tag-thing with sig-circle" visual? +``` + The cryptographic signature is calculated by its issuer. It certifies a hash digest, which in turn combines a set of input data. The exact input data depends on the signature type. Roughly: the hash digest is over the elements that the OpenPGP signature makes a statement about, combined with the metadata in the OpenPGP signature packet itself. More on this later. (signature_subpackets)=