Mailing-List: contact security-dev-help@xml.apache.org; run by ezmlm
Precedence: bulk
Reply-To: security-dev@xml.apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: RE: xml encryption/decryption of binary data
Date: Tue, 4 Apr 2006 11:41:57 +0200
Message-ID: <F85FE6B86227EE4DB26B341535C36A601B94AC@WBE11.ancy.fr.sopra>
Thread-Topic: xml encryption/decryption of binary data
Thread-Index: AcZXybSIMuoE2TTyRB2K7T8PnSP2BwAAcx3A
From: "Larchier Christophe" <clarchier@axway.com>
To: <security-dev@xml.apache.org>

It's XML signature but on binary datas (which are XML files, but it's =
not important).
With xml-security, it's possible to sign binary datas, why not to =
encrypt them ?
Don't you think that this functionnality should be added ?


-----Message d'origine-----
De : Berin Lautenbach [mailto:berin@wingsofhermes.org]
Envoy=E9 : mardi 4 avril 2006 11:24
=C0 : security-dev@xml.apache.org
Objet : Re: xml encryption/decryption of binary data


Larchier Christophe wrote:

> I sign with XML Signature.
> Note that canonicalization is not allowed.

Then it's not truly XML signature.  Without canonicalisation you run
into the problems that you are seeing.  So the only real way past is to
treat your document as a byte stream rather than an XML document and
sign it inside a set of elements as described earlier.

Cheers,
	Berin