Re: [PATCH v3 0/1] MR5516: wintrust: Add support for the PE image hash in CryptCATAdminCalcHashFromFileHandle().

[Hans Leidekker (＠hans)]

On Wed Apr 24 15:30:39 2024 +0000, eric pouech wrote:
> this doesn't make sense to me...
> if you need to skip the _content_ of the IMAGE_FILE_SECURITY_DIRECTORY,
> the actual size is OptionalHeader.DataDirectory[IMAGE_FILE_SECURITY_DIRECTORY].Size

The entry itself must skipped. The hash should be the same whether the image is signed or not.