Original sentence: To obtain a signature, non-Microsoft CSP developers must supply paperwork to Microsoft promising to obey various legal restrictions and giving valid contact information; however, they do not need to supply Microsoft with the CSP's actual code--they only supply a cryptographic hash of the CSP itself, which Microsoft then signs
Edited sentence: To obtain a signature, non-Microsoft CSP developers must supply paperwork to Microsoft promising to obey various legal restrictions and giving valid contact information; however, they do not need to supply Microsoft with the CSP's actual code—they only supply a cryptographic hash of the CSP itself, which Microsoft then signs