ACTION-779 - Review test cases for 1.1 and summarize which are missing

ACTION-793 - Review 1.1 interop to determine which gaps we have in 1.1 testing itself

DRAFT

This table shows what tests are specified in the 1.1 test cases ( http://www.w3.org/2008/xmlsec/wiki/Interop) and what needs to be added to test 2.0
Section Specification

1.1 Testcases

http://www.w3.org/2008/xmlsec/wiki/Interop

1.1 tests
XML Signature Syntax and Processing Version 2.0
http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/
3.2.1 XML Signature 2.0 Algorithm Identifiers and Implementation Requirements Canonicalization Required Canonical XML 2.0 1.1 tests
Transform
Required: XML Signature 2.0 Transform 1.1 tests
Selection
Required XML Documents or Fragments
http://www.w3.org/2010/xmldsig2#xml
1.1 tests
Required External Binary Data
http://www.w3.org/2010/xmldsig2#binaryExternal
1.1 tests
Required Selection of Binary Data within XML
http://www.w3.org/2010/xmldsig2#binaryfromBase64
Verification
Optional DigestDataLength
http://www.w3.org/2010/xmldsig2#DigestDataLength
Optional PositionAssertion
http://www.w3.org/2010/xmldsig2#PositionAssertion
Optional IDAttributes
http://www.w3.org/2010/xmldsig2#IDAttributes
Canonicalization
Required Canonical XML 1.0 (omits comments) http://www.w3.org/TR/2001/REC-xml-c14n-20010315 1.1 tests
Required Canonical XML 1.1 (omits comments) http://www.w3.org/2006/12/xml-c14n11 1.1 tests for c14n, but unknown if the test is inclusive or exclusive
Required Exclusive XML Canonicalization 1.0 (omits comments) http://www.w3.org/2001/10/xml-exc-c14n# 1.1 tests for c14n, but unknown if the test omits comments
Recommended Canonical XML 1.0 with Comments http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments
Recommended Canonical XML 1.1 with Comments http://www.w3.org/2006/12/xml-c14n11#WithComments
Recommended Exclusive XML Canonicalization 1.0 with Comments http://www.w3.org/2001/10/xml-exc-c14n#WithComments
Transform
Required base64
http://www.w3.org/2000/09/xmldsig#base64
Required Enveloped Signature
http://www.w3.org/2000/09/xmldsig#enveloped-signature
Recommended XPath http://www.w3.org/TR/1999/REC-xpath-19991116 1.1 tests
Recommended XPath Filter 2.0 http://www.w3.org/2002/06/xmldsig-filter2
Optional XSLT
http://www.w3.org/TR/1999/REC-xslt-19991116
Core Validation Interoperability (4.3)
Verify:
  1. Capability to check each Reference to to see if the data object matches with the expected data object.
  2. The cryptographic signature validation of the signature calculated over SignedInfo.
  3. Reference validation, the verification of the digest contained in each Reference in SignedInfo.
Algorithms (Message Digests)
http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/#sec-MessageDigests

10.1.1 SHA-1 1.1 Tests

10.1.2 SHA-256 1.1 Tests

10.1.3 SHA-384 1.1 Tests

10.1.4 SHA-512 1.1 Tests
Algorithms ( Message Authentication Codes )
http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/#sec-MACs

10.2.1 HMAC 1.1 Tests
Algorithms ( Signature Algorithms)
http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/#sec-SignatureAlg

10.3.1 DSA 1.1 Tests

10.3.2 RSA (PKCS#1 v1.5) 1.1 Tests

10.3.3 ECDSA 1.1 Tests
Algorithms (Canonicalization Algorithms)
http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/#sec-c14nAlg-2.0

10.4.1 Canonical XML 2.0
Algorithms (The Transform Algorithm)
http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/#sec-Transforms-2.0

10.5 The Transform Algorithm


Streaming Profile

Section Specification 1.1 Tests Needs Development
XML Signature Streaming Profile of XPath 1.0
http://www.w3.org/2008/xmlsec/Drafts/xmldsig-xpath/
2. Streamable One pass Streaming Needs Development
 

Author: Gerald Edgar
Date: 6 March 2012