- From: Thomas Roessler <tlr@w3.org>
- Date: Fri, 20 Feb 2009 22:54:18 +0100
- To: Brian LaMacchia <bal@exchange.microsoft.com>
- Cc: XMLSec WG Public List <public-xmlsec@w3.org>
On 20 Feb 2009, at 22:49, Brian LaMacchia wrote: > The Hash element is an optional element that specifies the hash > algorithm used to generate the > elliptic curve E and/or base point G verifiably at random. If the > Hash element is present then the > optional Seed element in the Curve element must also be present. > > COMMENT 1: I added the second sentence that if you specify the Hash > element you must also specify the Seed element, because the Hash > element doesn't make sense without the Seed element (they get used > together to verify the curve was generated randomly) It would seem more in line with the overall style of XML Signature to put the hash algorithm into an attribute, and the Seed into a child of Hash. Having the two of them as siblings makes some sense when there is a default hash algorithm specified. So, I'd suggest something like this: <Hash Algorithm="http://..."> <Seed>asdfasdf</Seed> </Hash> ... instead of the current approach. Does this make sense, or am I missing something? Or would something like... <Seed Algorithm="http://...">asdfasdf</Seed> make more sense?
Received on Friday, 20 February 2009 21:54:28 UTC