OptionalalgHash algorithm. Use "sha256" for sidecar / spec-compliant flows.
OptionalexclusionsByte ranges (in the target asset) excluded from the hash. Empty means the hash covers the entire asset.
Hash bytes.
OptionalnameOptional friendly name (e.g. "raw asset").
OptionalpadPadding bytes. May be empty.
A pre-computed data hash assertion. Pass to
signDataHashedEmbeddableto produce a signed embeddable manifest without needing the asset bytes at sign time (e.g. for sidecar / remote-manifest workflows).For a spec-compliant raw SHA-256 of the whole asset, use:
{ alg: "sha256", hash: <raw sha256 bytes>, exclusions: [], pad: Buffer.alloc(0) }The shape mirrors the c2pa-rs
DataHashserde struct.hashandpadare serialized as byte arrays (serde_bytes).