We have a system which Authenticode signs files such as .DLL, .EXE, etc. We use SA256 hashing when adding the certificate with signtool with the following command line: signtool.exe sign /debug /fd ...

Signtool should support the generation of detached signatures in for archives that don't have integrated signing support. Under this category are: There are some key bits to consider when dealing with ...