Re: Signing a SignedData object with RSA

Anette 

> Since neither the CMS spec nor PKCS#7 states this explicitly, I'd very
> much appreciate to have the following confirmed - or corrected: 
Section 12 will provide thin information.

> When signing a SignedData object with RSA keys: 
> - the signature is to be formed according to PKCS#1, and this is just
> the value of the signature OCTET STRING in the SignerInfo object
Correct.

> - the signatureAlgorithm of the SignerInfo is to be a proper signature
> algorithm, like sha1WithRSASignature
Correct.

Russ