I have a question relative to DSS Signature mode, RFC 2409 states that 'DSS signatures MUST be encoded as r followed by s.' Does this mean that r and s are encoded as normal, that is in an ASN1 sequence as follows: SEQUENCE { r INTEGER, s INTEGER } or Does this mean that just the two binary values for r and s are used without being wrapped in an ANS1 sequence ?