Re: What is the best way to handle the case where you would end up with too many references in a digital signature? from Rich Salz on 2003-10-16 (w3c-ietf-xmldsig@w3.org from October to December 2003)

From: Rich Salz <rsalz@datapower.com>
Date: Thu, 16 Oct 2003 19:11:05 -0400 (EDT)
To: "Chugh, Sanjay" <schugh@filenet.com>
Cc: "w3c-ietf-xmldsig@w3.org" <w3c-ietf-xmldsig@w3.org>
Message-ID: <Pine.LNX.4.44L0.0310161905500.5715-100000@smtp.datapower.com>

> I think I will end up with up to 200 references, in the SignedInfo or
> manifest, whereever we decide to put them.

Can you modify your data so that a single simple XPath expression will
find all the elements, or most of them?  (For example, are they all in a
single namespace?)

If not, the only hope you have of making it efficient is probably to write
an XSLT transformation with as many XPath's as needed, and hope that the
XSLT processor can parallelize or otherwise stream its searches.

	/r$

PS:  We do that; see URL's below. :)  But I really can't think of any
other advice.
--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html

Received on Thursday, 16 October 2003 19:11:06 UTC