PKCS7 signatures. This was written by lha@ and discussed on tech-security. I've slightly cleaned up the program and man page. Contrary to the original version, this doesn't provide a default trust anchor.