ACTION-779 - Review test cases for 1.1 and summarize which are missing

ACTION-793 - Review 1.1 interop to determine which gaps we have in 1.1 testing itself

DRAFT

Streaming Profile

Test cases for Canonical XML 2.0

http://www.w3.org/2008/xmlsec/Drafts/c14n-20/test-cases/

Examples from Canonical XML 1.0
	PIs, Comments, and Outside of Document Element Whitespace in Document Content Start and End Tags Character Modifications and Character References Entity References UTF-8 Encoding
Dealing with Namespaces
	Namespaces declarations are pushed down Default namespace declarations Sorting namespace declarations Namespace Re-declarations Superfluous Namespace declarations Special namespaces "xml", "xsi", "xsd" Prefixes in Element content

 

 

XML Signature Syntax and Processing Version 1.1 Test cases
http://www.w3.org/TR/xmldsig-core1/

http://www.w3.org/TR/xmldsig-core1/	Test Cases for C14N 1.1 and XMLDSig Interoperability http://www.w3.org/2007/xmlsec/interop/xmlsig-interop-doc/testcases.html	http://www.w3.org/TR/2008/NOTE-xmldsig2ed-tests-20080610/	http://www.w3.org/2008/xmlsec/wiki/Interop
3. Processing Rules
3.1 Signature Generation 3.1.1 Reference Generation 3.1.2 Signature Generation	3.3 Test Cases for XMLDSig         3.3.1 Test Cases for C14N 1.1 in XMLDSig         3.3.2 Test Cases on nodeset to octet-stream conversion by C14n 1.1 explicitly reflected in the chain of transforms         3.3.3 Test Cases on schema based XPointers and canonicalization         3.3.4 Test Cases on String encoding of Distinguished Names             3.3.4.1 Test Cases on differences identified in RFC 2253 and RFC 4514                 3.3.4.1.1 Test case xmldsig/dname/diffRFCs-1                 3.3.4.1.2 Test case xmldsig/dname/diffRFCs-2                 3.3.4.1.3 Test case xmldsig/dname/diffRFCs-3                 3.3.4.1.4 Test case xmldsig/dname/diffRFCs-4                 3.3.4.1.5 Test case xmldsig/dname/diffRFCs-5             3.3.4.2 Test Cases for RFC 4514                 3.3.4.2.1 Test case xmldsig/dname/dnString-4                 3.3.4.2.2 Test case xmldsig/dname/dnString-6                 3.3.4.2.3 Test case xmldsig/dname/dnString-8
3.2 Core Validation 3.2.1 Reference Validation 3.2.2 Signature Validation	All?
4. Core Signature Syntax
4.1 The ds:CryptoBinary Simple Type			Not referenced
4.2 The Signature element			All DSig
4.3 The SignatureValue Element
4.4 The SignedInfo Element 4.4.1 The CanonicalizationMethod Element 4.4.2 The SignatureMethod Element 4.4.3 The Reference Element 4.4.3.1 The URI Attribute 4.4.3.2 The Reference Processing Model 4.4.3.3 Same-Document URI-References 4.4.3.4 The Transforms Element 4.4.3.5 The DigestMethod Element 4.4.3.6 The DigestValue Element
4.5 The KeyInfo Element 4.5.1 The KeyName Element 4.5.2 The KeyValue Element 4.5.2.1 The DSAKeyValue Element 4.5.2.2 The RSAKeyValue Element
4.5.2.3 The ECKeyValue Element 4.5.2.3.1 Explicit Curve Parameters 4.5.2.3.2 Compatibility with RFC 4050 4.5.3 The RetrievalMethod Element			XML Security 1.1 Core: Elliptic Curve algorithms Various combinations of the following Digest algorithm - SHA1/256/384/512 Signature algorithm - ECDSA (P256/P384/P521 with SHA1/SHA256/SHA384/SHA512) Canonicalization algorithm - C14N 1.0, Exc C14N 1.0 KeyInfo format - RFC 4050 style ECDSA KeyValue, XML signature 1.1 style ECKeyValue Microsoft's test vectors - 12 files 12 files: Digest = SHA1/SHA256/SHA384/SHA512, Signature = ECDSA (P256/P384/P521 with SHA1/SHA256/SHA384/SHA512), RFC4050 ECDSAKeyValue 12 files: all of the above with Exc C14N 1.0 Oracle's test vectors - 18 files 12 files: Digest = SHA1/SHA256/SHA384/SHA512, Signature = ECDSA (P256/P384/P521 with SHA1/SHA256/SHA384/SHA512), RFC4050 ECDSAKeyValue 12 files: all of the above XML Signature 1.1 ECKeyValue XML Security 1.1 Core: Other items AES Keywrap with padding (XML Encryption) RFC 5649 OCSP - add and read OCSP information successfully (Sun?) DEREncodedKeyValue (Sun?) RFC4050 compatibility (4.4.2.3.2) ? DONE Required Exclusive C14N - note that implemented or interop? DONE XPath 2.0
4.5.4 The X509Data Element 4.5.4.1 Distinguished Name Encoding Rules 4.5.5 The PGPData Element 4.5.6 The SPKIData Element 4.5.7 The MgmtData Element 4.5.8 XML Encryption EncryptedKey and DerivedKey Elements 4.5.9 The DEREncodedKeyValue Element 4.5.10 The KeyInfoReference Element			XML Encryption 1.1 Derived Keys Test case 1: EncryptedData with content encryption key derived from shared secret. Key derivation method: ConcatKDF (http://www.w3.org/2009/xmlenc11#ConcatKDF). Test case 2: EncryptedData with content encryption key derived from shared secret password. Key derivation method: PBKDF2 (http://www.w3.org/2009/xmlenc11#pbkdf2
4.6 The Object Element
5. Additional Signature Syntax
5.1 The Manifest Element
5.2 The SignatureProperties Element
5.3 Processing Instructions in Signature Elements
5.4 Comments in Signature Elements
6. Algorithms
6.1 Algorithm Identifiers and Implementation Requirements
6.2 Message Digests 6.2.1 SHA-1 6.2.2 SHA-256 6.2.3 SHA-384 6.2.4 SHA-512			In Tests documented
6.3 Message Authentication Codes 6.3.1 HMAC
6.4 Signature Algorithms 6.4.1 DSA 6.4.2 RSA (PKCShttp://www.w3.org/TR/xmldsig-core1/#1 v1.5) 6.4.3 ECDSA	3.3.4 Test Cases on String encoding of Distinguished Names             3.3.4.1 Test Cases on differences identified in RFC 2253 and RFC 4514                 3.3.4.1.1 Test case xmldsig/dname/diffRFCs-1                 3.3.4.1.2 Test case xmldsig/dname/diffRFCs-2                 3.3.4.1.3 Test case xmldsig/dname/diffRFCs-3                 3.3.4.1.4 Test case xmldsig/dname/diffRFCs-4                 3.3.4.1.5 Test case xmldsig/dname/diffRFCs-5             3.3.4.2 Test Cases for RFC 4514                 3.3.4.2.1 Test case xmldsig/dname/dnString-4                 3.3.4.2.2 Test case xmldsig/dname/dnString-6                 3.3.4.2.3 Test case xmldsig/dname/dnString-8		1.1 tests
6.5 Canonicalization Algorithms 6.5.1 Canonical XML 1.0 6.5.2 Canonical XML 1.1 6.5.3 Exclusive XML Canonicalization 1.0	3.2 Test Cases for Canonicalization 1.1         3.2.1 Test Cases for xml:lang attribute         3.2.2 Test Cases for xml:space attribute         3.2.3 Test Cases for xml:id attribute         3.2.4 Test Cases for xml:base attribute             3.2.4.1 Test Cases for checking xml:base attribute propagation                 3.2.4.1.1 Test case c14n11/xmlbase-prop-1                 3.2.4.1.2 Test case c14n11/xmlbase-prop-2                 3.2.4.1.3 Test case c14n11/xmlbase-prop-3                 3.2.4.1.4 Test case c14n11/xmlbase-prop-4                 3.2.4.1.5 Test case c14n11/xmlbase-prop-5                 3.2.4.1.6 Test case c14n11/xmlbase-prop-6                 3.2.4.1.7 Test case c14n11/xmlbase-prop-7             3.2.4.2 Test Cases for checking XML-C14N1.1 specification tests                 3.2.4.2.1 Test case c14n11/xmlbase-c14n11spec-102                 3.2.4.2.2 Test case c14n11/xmlbase-c14n11spec2-102                 3.2.4.2.3 Test case c14n11/xmlbase-c14n11spec3-103         3.2.5 Test Cases for checking examples in the XML-C14N1.1 Appendix 3.3.1 Test Cases for C14N 1.1 in XMLDSig		No Exclusive Canonicalization test
6.6 Transform Algorithms 6.6.1 Canonicalization 6.6.2 Base64 6.6.3 XPath Filtering 6.6.4 Enveloped Signature Transform 6.6.5 XSLT Transform

---

XML 1.1 Canonicalization Test case mapping

Test Cases for 1.1

Author: Gerald Edgar

July 17, 2011