Simplify non-onepass signatures

It appears that we can actually assume the signature to be before the
literal data.  This simplifies the code a lot.