Where does codesign store the signature for a signed text file on OSX?
<p>I have a simple app bundle with the following structure:</p>

<pre><code>myapp.app/Contents/
myapp.app/Contents/MacOS/myapp
myapp.app/Contents/Resources/empty.lproj
myapp.app/Contents/Info.plist
myapp.app/Contents/PkgInfo
</code></pre>

<p>If I execute </p>

<pre><code>codesign -s "Developer ID" myapp.app/Contents/Info.plist
</code></pre>

<p>I can check that the file got signed with</p>

<pre><code>codesign -d -v myapp.app/Contents/Info.plist
</code></pre>

<p>which gives the following output</p>

<pre><code>Executable=/pathToApp/quicknanobrowser.app/Contents/Info.plist
Identifier=Info
Format=generic
CodeDirectory v=20100 size=113 flags=0x0(none) hashes=1+2 location=embedded
Signature size=1278
Signed Time=26 Jan 2016 12:31:24
Info.plist=not bound
TeamIdentifier=not set
Sealed Resources=none
Internal requirements count=1 size=80
</code></pre>

<p>Where is the data that the file was signed stored? The folder structure did not change (no new files), the size of the file did not change. Is it stored in some filesystem specific metadata? Is it possible to access / read this metadata?</p>