XML Signature Choi, Yoon-jung

Outline Introduction Introduction Structure Structure Structure - Example Structure - Example Creation Creation Validation Validation Conclusion Conclusion Reference Reference

Introduction XML Signature is a W3C recommendation that defines and XML syntax for digital signatures. XML Signature is a W3C recommendation that defines and XML syntax for digital signatures. It add authentication, data integrity, and support for non-repudiation to the data that they sign. It add authentication, data integrity, and support for non-repudiation to the data that they sign.

Introduction XML signatures can be used to sign data – a resource – of any type. XML signatures can be used to sign data – a resource – of any type. - detached signature - detached signature - enveloped signature - enveloped signature - enveloping signature - enveloping signature

Structure

Structure - Example

Structure - Example j6lwx3rvEPO0vKtMup4NbeVu8nk= j6lwx3rvEPO0vKtMup4NbeVu8nk= MC0CFFrVLtRlk=... MC0CFFrVLtRlk=... … </Signature>

Creation  Determine which resources are to be signed  Calculate the digest of each resource  Collect the Reference elements  Signing  Add key information  Enclose in a Signature element

Validation The required steps of core validation include Reference Validation and Signature Validation. The required steps of core validation include Reference Validation and Signature Validation. - Reference Validation - Reference Validation : The verification of the digest contained in each Reference in SignedInfo. : The verification of the digest contained in each Reference in SignedInfo. - Signature Validation - Signature Validation : The cryptographic signature validation of the signature calculated over SignedInfo. : The cryptographic signature validation of the signature calculated over SignedInfo.

Conclusion As XML becomes a vital component of the emerging electronic business infrastructure, we need trustable, secure XML message to form the basis of business transactions. As XML becomes a vital component of the emerging electronic business infrastructure, we need trustable, secure XML message to form the basis of business transactions. XML Signature is an evolving standard for digital signatures. XML Signature is an evolving standard for digital signatures.

Reference XML-Signature Syntax and Processing XML-Signature Syntax and Processing Introduction to XML Digital Signatures. (by Ed Simon) Introduction to XML Digital Signatures. (by Ed Simon) gnature gnature gnature gnature ocs/1.6/tutorial/doc/XMLDigitalSig natureAPI7.html ocs/1.6/tutorial/doc/XMLDigitalSig natureAPI7.html ocs/1.6/tutorial/doc/XMLDigitalSig natureAPI7.html ocs/1.6/tutorial/doc/XMLDigitalSig natureAPI7.html

The End Thank you for your listening.