# Tag Info

Proposition: the signature consists of the message $M$ and a standard signature $S$ of $M$ as an appendix, e.g. $S$ is per Ed25519. This allows to verify any subset of $M$ (by checking the subset of $M$ against the full $M$, and the full $M$ against it's signature $S$). This proposal reveals $M$, but that's unavoidable: if one can verify any subset of $M$, ...