xml-dsig

XML Signature in a Web application

Hi, We are developing an e-Banking web application for a small bank (up to 20000 clients/users). We have to implement digital signatures with X509 certificates (issued by CA on USB tokens) for signing payment information. We tried using CAPICOM but it seems that it is not working well with Windows Vista (have not tried it with Win 7). T...

Digitally Sign Parts of a XML document

I have an XML document having structure similar to the following <envelop> <header>blaa</header> <message>blaa blaa</message> <footer></footer> </envelop> I want to digitally sign the header and message elements and add the signature to the footer element. How can I sign the elements and then later verify the signature (...

XML DSIG Verification

I'm digitally signing a XML document and verifying it on 2 different machines (Sign it at one machine and verifying on another). I'm doing the following to verify the XML DSIG in CSharp.Net. public static Boolean VerifyXml(XmlDocument document) { document.PreserveWhitespace = true; // Create a ne...

digital signature - detached Pkcs#7 to XML-DSIG

Hi! I am struggling with the following scenario: an XML-message is created client-side and digitally signed using mozilla's window.crypto.signText. After signing, the message and the signature are transmitted via a webservice (.net) to the server. Everything is fine until this point. on the server, the XML shall be included in another...

Crossbrowser XmlDsig

I am building a web site where the user has to digitally sign a xml reciept to confirm that he recieved the package. I am currently doing this using a custom ActiveX control in IE. I was wondering if I could accomplish the same thing with/for other browsers. Is it even possible? ...

The case of "id" attribute when signing an element in a XML file

Is the case of the "id" attribute important, when creating a reference to an element for digital signing following xml-dsig standard? I've seen attributes named "ID", "Id" and "id" and some software packages have trouble finding the correct element/node for different forms. Also following various specs and schemas, there are different ...

How To Use XmlDsigC14NTransform Class in C#

Hello, I am trying to canonicalize an xml node by using System.Security.Cryptography.Xml.XMLDsigC14nTransform class of c# .net Framework 2.0. The instance expects three different input types, NodeList, Stream and XMLDocument. I try the transform with all of these input types but I get different results. What I really want to do is to ...

XML DSig and xml reserved characters

Let's say I have content like: <foo>&lt;bar&gt;</foo> When you calculate the digest to you use "<bar>" or "&lt;bar&gt;"? ...

Java XML DSig and XPath

I'm signing part of an XML document using the Java XML DSig api. I'm trying to understand how it is arriving at the Digest value. My document is: <?xml version=\"1.0\" encoding=\"UTF-8\"?><PurchaseOrder><foo>bar</foo></PurchaseOrder> My xpath expression is: PurchaseOrder/foo/text() What I attempt to do is: Call the Java DSIG li...