W3C

XML Security Working Group Teleconference

27 Sep 2011

Agenda

See also: IRC log

Attendees

Present
Frederick_Hirsch, Hal_Lockhart, Cynthia_Martin, Pratik_Datta
Regrets
Scott_Cantor, Magnus_Nystrom, Bruce_Rich, Ed_Simon, Shivaram_Mysore
Chair
Frederick_Hirsch
Scribe
fjh

Contents


<trackbot> Date: 27 September 2011

<scribe> ScribeNick: fjh

Administrative

Minutes

http://lists.w3.org/Archives/Public/public-xmlsec/2011Sep/att-0044/minutes-2011-09-13.html

RESOLUTION: Minutes from 13 September 2011 are approved.

XML Encryption 1.1

fjh: OAEP and SHA-1 question

http://lists.w3.org/Archives/Public/public-xmlsec/2011Sep/0045.html

cynthia: this one will require more research

fjh: OAEP and SHA-1 question, can someone offer to help on this one?
... ConcatKDF and salt/nonce

http://lists.w3.org/Archives/Public/public-xmlsec/2011Sep/0049.html

pdatta: noticed this during coding, how to get randomness
... we copied from NIST, no provision to add randomness there
... so randomness must be incorporated somehow

hal: should ask on NIST feedback via email, listed on NIST site

fjh: pdatta you might want to ask on NIST list and cc our public list
... I asked magnus offline about this, by email

cynthia: NIST has implemented a lot of this

pdatta: hal, can you please share the address

<Cynthia> The NIST reference also includes vendors that support NIST, btw

XML Signature 2.0

LC-2488 updates

http://lists.w3.org/Archives/Public/public-xmlsec/2011Sep/0046.html

Additional editorial feedback on proposal - http://lists.w3.org/Archives/Public/public-xmlsec/2011Sep/0051.html

pdatta: this is for 2.0?

fjh: yes, we should first make change for 2.0, then see about also doing it in 1.1

pdatta: will make the editorial changes to 2.0

Other Business

cynthia: checking on possible interop involvement

fjh: a PAG resolution might help the WG proceed with testing

Adjourn

Summary of Action Items

[End of minutes]

Minutes formatted by David Booth's scribe.perl version 1.135 (CVS log)
$Date: 2009-03-02 03:52:20 $