i didn't see any other responses to this thread. was there a verdict on this issue? that is, should the specification say: Signed Message :- OpenPGP Message, Signature Packet | One-Pass Signed Message or Signed Message :- Signature Packet, OpenPGP Message | One-Pass Signed Message ?