Mailing-List: contact dev-help@santuario.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@santuario.apache.org
Received-SPF: pass (nike.apache.org: domain of borillo@gmail.com designates
 209.85.160.182 as permitted sender)
MIME-Version: 1.0
From: Ricardo Borillo <borillo@gmail.com>
Date: Mon, 29 Aug 2011 15:30:06 +0200
Message-ID: 
 <CANttMLTuxQLxCbg=wYhqfcPS9GNiS0UGBm3LGxWYmtKP5EvE9A@mail.gmail.com>
Subject: Two phase signature
To: dev@santuario.apache.org
Content-Type: text/plain; charset=ISO-8859-1

Hi all,

Is it possible with Apache Santuario to generate the hash value of a
canonicalized SignedInfo, then encrypt this hash with a RSA key in a
separate process and set back the result as the SignatureValue to the
orginal signature?

We are developing a cryptographic applet. Now we generate the full xml
signature in the client, but it would be nice to complete the
signature process in two phases. In the first one, a server process
should init the structure of the xml signature and in the second one,
the client applet sign the proper hash with a simple RAW RSA
signature.

Is this scenario possible?

Thanks all in advance :)

---
Salut,
====================================
Ricardo Borillo Domenech
http://xml-utils.com / http://twitter.com/borillo