Given that A wants to send a message M to B,
I have 2 scenarios as shown:
The difference between the 2 is that for case 1, the digital signature is appended to the message before being encrypted using the symmetric key. For case 2, the digital signature is not encrypted using the symmetric key.
May I know which case is better? What are the security concerns of each of the case?