Nested signature blocks

For any signature block and any other data, there exists a key which produces the same signature block. In this report we identify the threat that this poses for the SAProxy scheme which uses nested signature blocks as pointers to other tokens. A modification to public key certificates is then proposed to eliminate this threat.