# XML Security Working Group Teleconference ## 04 Sep 2012 [Agenda][3] See also: [IRC log][4] ## Attendees Present Frederick_Hirsch, Bruce_Rich, Scott_Cantor, Gerald_Edgar Regrets Chair Frederick_Hirsch Scribe fjh ## Contents * [Topics][5] 1. [Administrivia: Agenda review, Liaisons, Announcements][6] 2. [Minutes Approval][7] 3. [PAG Update][8] 4. [Editorial updates][9] 5. [Interop status][10] 6. [Roadmap update][11] 7. [Actions][12] 8. [Other Business][13] 9. [Adjourn][14] * [Summary of Action Items][15] * * * Date: 04 September 2012 ScribeNick: fjh ### Administrivia: Agenda review, Liaisons, Announcements no announcements ### Minutes Approval Approve minutes, 28 August 2012 [http://lists.w3.org/Archives/Public/public- xmlsec/2012Aug/att-0034/minutes-2012-08-28.html][16] **RESOLUTION: Minutes from 28 August 2012 are approved.** fjh: note that we resolved to update a reference in XML Encryption 1.1 but it may make sense to wait, later on today's agenda ### PAG Update fjh: work is progressing to finalize the report, hopefully we will have more information next week ### Editorial updates XML Signature 1.1 updates: [http://lists.w3.org/Archives/Public/public- xmlsec/2012Sep/0000.html][17] (Frederick) fjh: key length wording change completed, formatting fixes Also updated Security algorithms cross reference, section 3.1 DSA-SHA1 fjh: please review these changes, as there is a change to the MUST/MAY language for DSA-SHA1 for consistency ... do not think there any additional changes for XML Signature 1.1 remaining XML Encryption 1.1 updates: [http://lists.w3.org/Archives/Public/public- xmlsec/2012Sep/0001.html][18] fjh: per ACTION-905 changed RSA 1.5 from Required to Optional, moved AES-128/192/256-pad symmetric key wrap algorithm to informative appendix, Fixed formatting of schema and examples , ACTION-904 ... I did *not* update the reference to SP800-56A to the newer draft reference as it is a normative reference ... please review these changes as well XML Security Algorithms Cross Reference updates: [http://lists.w3.org/Archives/Public/public-xmlsec/2012Sep/0002.html][19] fjh: should be up to date now as well ### Interop status fjh: work is progressing on key agreement, hope to hear soon scantor: have some resourcing so some interop work is possible , do not have details or timeline yet ### Roadmap update fjh: defer until we have more information on interop, discuss next week ### Actions ACTION-902? ACTION-902 -- Scott Cantor to check whether he can resource an additional implementer (Brent) to complete implementation and interop of XML Signature 1.1 X509Digest; DEREncodedKeyValue, KeyInfoReference, to eliminate issue of same author and to obtain two implementations for these -- due 2012-08-28 -- OPEN [http://www.w3.org/2008/xmlsec/track/actions/902][20] ACTION-902 closed ACTION-902 Check whether he can resource an additional implementer (Brent) to complete implementation and interop of XML Signature 1.1 X509Digest; DEREncodedKeyValue, KeyInfoReference, to eliminate issue of same author and to obtain two implementations for these closed ACTION-907? ACTION-907 -- Frederick Hirsch to update xml enc reference for SP800-56A -- due 2012-09-04 -- OPEN [http://www.w3.org/2008/xmlsec/track/actions/907][21] fjh: let us create issue to update reference later in publication process if possible and close the action now ACTION-907: create issue to update reference later in publication process if possible ACTION-907 Update xml enc reference for SP800-56A notes added ISSUE: reference SP800-56A later in publication process if the latest version is no longer a draft Created ISSUE-234 - Reference SP800-56A later in publication process if the latest version is no longer a draft ; please complete additional details at [http://www.w3.org/2008/xmlsec/track/issues/234/edit][22] . ACTION-907: see ISSUE-234, reference SP800-56A later in publication process if the latest version is no longer a draft ACTION-907 Update xml enc reference for SP800-56A notes added ACTION-907 closed ACTION-907 Update xml enc reference for SP800-56A closed Close the following pending actions close ACTION-904 ACTION-904 Follow up to fix formatting of XML Signature 1.1 and XML Encryption 1.1 schema and examples closed close ACTION-905 ACTION-905 Edit XML Encryption 1.1 to change RSA 1.5 from Required to Optional closed close ACTION-906 ACTION-906 Update XML Signature for key size language changes closed ISSUE-233: issue addressed with XML Signature 1.1 update for key size language, ACTION-906 ISSUE-233 Fix in XML Signature and cross-reference advice about 2010 notes added close ISSUE-233 ISSUE-233 Fix in XML Signature and cross-reference advice about 2010 closed close ACTION-908 ACTION-908 Update XML Encryption 1.1 to move AES Key Wrap with Padding algorithm material to an informative appendix closed ### Other Business None ### Adjourn ## Summary of Action Items [End of minutes] * * * Minutes formatted by David Booth's [scribe.perl][23] version 1.135 ([CVS log][24]) $Date: 2009-03-02 03:52:20 $ [1]: http://www.w3.org/Icons/w3c_home [2]: http://www.w3.org/ [3]: http://lists.w3.org/Archives/Public/public-xmlsec/2012Sep/0003.html [4]: http://www.w3.org/2012/09/04-xmlsec-irc [5]: #agenda [6]: #item01 [7]: #item02 [8]: #item03 [9]: #item04 [10]: #item05 [11]: #item06 [12]: #item07 [13]: #item08 [14]: #item09 [15]: #ActionSummary [16]: http://lists.w3.org/Archives/Public/public- xmlsec/2012Aug/att-0034/minutes-2012-08-28.html [17]: http://lists.w3.org/Archives/Public/public-xmlsec/2012Sep/0000.html [18]: http://lists.w3.org/Archives/Public/public-xmlsec/2012Sep/0001.html [19]: http://lists.w3.org/Archives/Public/public-xmlsec/2012Sep/0002.html [20]: http://www.w3.org/2008/xmlsec/track/actions/902 [21]: http://www.w3.org/2008/xmlsec/track/actions/907 [22]: http://www.w3.org/2008/xmlsec/track/issues/234/edit [23]: http://dev.w3.org/cvsweb/~checkout~/2002/scribe/scribedoc.htm [24]: http://dev.w3.org/cvsweb/2002/scribe/