Don't know -- the brief asserts that there is no known technique for altering the signature without altering the image (specifically, they say that you can't separate the content from the noise, change the noise, and add it back to the content again), but I don't know what the limits of that assertion are...