- From: Dournaee, Blake <bdournaee@rsasecurity.com>
- Date: Mon, 18 Jun 2001 12:34:22 -0700
- To: "Joseph M. Reagle Jr." <reagle@w3.org>
- Cc: IETF/W3C XML-DSig WG <w3c-ietf-xmldsig@w3.org>, "Stucke, Janet" <janet@rsasecurity.com>, "Shi, Angela" <ashi@rsasecurity.com>
Interoperability Results for RSA Security's Cert-J 2.0
W3C XML Signature Interoperability Requirements:
merlin-xmldsig-sixteen.tar.gz Keyword Cert-J
------------------------------------------------
Detached Signature MUST Y1
Enveloping Signature: same
document reference with
fragment (URI="#Object1") MUST Y1
Enveloped Signature: same
document reference (URI="")
with Enveloped Signature
Transform. MUST Y1
SignatureValue generation/
validation MUST Y1
Manifest DigestValue
generation/validation MAY Y1
Feature: laxly schema valid
Signature element generation MUST Y1
XPointers '#xpointer(/)' SHOULD N
XPointers '#xpointer(id("ID"))' SHOULD N
XPath SHOULD Y1
the dsig XPath 'here()'
function (can be used to
implement enveloped signature) SHOULD Y1
XSLT (note, the child XSLT
element of Transform has been
deprecated.) MAY N
RetrievalMethod (e.g., X509Data)SHOULD Y1
merlin-xmldsig-sixteen.tar.gz Keyword Cert-J
------------------------------------------------
Digest SHA1 MUST Y1
Encoding Base64 MUST Y1
MAC HMAC-SHA1 MUST Y1
Signature DSAwithSHA1 MUST Y1
RSAwithSHA1 SHOULD Y1
Canonicalization minimal SHOULD N
Canonical XML (20010315) MUST Y1
Canonical XML with comments SHOULD Y1
Signature Transform Enveloped
Signature MUST Y1
merlin-xmldsig-fifteen.tar.gz Cert-J
----------------------------------------------
signature-enveloped-dsa.xml Y1
signature-enveloping-b64-dsa.xml Y1
signature-enveloping-dsa.xml Y1
signature-enveloping-hmac-sha1-40.xml Y1
signature-enveloping-hmac-sha1.xml Y1
signature-enveloping-rsa.xml Y1
signature-external-b64-dsa.xml Y1
signature-external-dsa.xml Y1
Blake Dournaee
Toolkit Applications Engineer
RSA Security
"The only thing I know is that I know nothing" - Socrates
Received on Monday, 18 June 2001 15:31:41 UTC