Fwd: Transition Announcement: Last Call WD "XML Encryption 1.1" and "XML Encryption 1.1 CipherReference Processing using 2.0 Transforms"

The Last Call drafts of  "XML Encryption 1.1<http://www.w3.org/TR/2012/WD-xmlenc-core1-20120105/>" and  "XML Encryption 1.1 CipherReference Processing using 2.0 Transforms<http://www.w3.org/TR/2012/WD-xmlenc-transform20-20120105/>" were published today.

Also published were First Public Working Drafts  of  "Test Cases for XML Encryption 1.1<http://www.w3.org/TR/2012/WD-xmlenc-core1-testcases-20120105/>" and "Test Cases for Canonical XML 2.0<http://www.w3.org/TR/2012/WD-xml-c14n2-testcases-20120105/>"  and an update to the Note-track "XML Security Algorithm Cross-Reference<http://www.w3.org/TR/2012/WD-xmlsec-algorithms-20120105/>" Working Draft.

See http://www.w3.org/2008/xmlsec/#news (and http://www.w3.org/News/2012#entry-9310 )

Thanks everyone for contributing to this work.

regards, Frederick

Frederick Hirsch, Nokia
Chair XML Security WG


Begin forwarded message:

From: "Hirsch Frederick (Nokia-CIC/Boston)" <Frederick.Hirsch@nokia.com<mailto:Frederick.Hirsch@nokia.com>>
Date: January 5, 2012 6:30:33 PM EST
To: "chairs@w3.org<mailto:chairs@w3.org> chairs@w3.org<mailto:chairs@w3.org>" <chairs@w3.org<mailto:chairs@w3.org>>, W3C Team <w3t-comm@w3.org<mailto:w3t-comm@w3.org>>
Cc: "Hirsch Frederick (Nokia-CIC/Boston)" <Frederick.Hirsch@nokia.com<mailto:Frederick.Hirsch@nokia.com>>, Thomas Roessler <tlr@w3.org<mailto:tlr@w3.org>>
Subject: Transition Announcement: Last Call WD "XML Encryption 1.1" and "XML Encryption 1.1 CipherReference Processing using 2.0 Transforms"

(1) This is a Last Call Working Draft transition announcement for two  Recommendation track specifications:

(2) Document title, URIs

1. "XML Encryption 1.1",  http://www.w3.org/TR/2012/WD-xmlenc-core1-20120105/

2. "XML Encryption 1.1 CipherReference Processing using 2.0 Transforms", http://www.w3.org/TR/2012/WD-xmlenc-transform20-20120105/

(3) Instructions for providing feedback.

Feedback is welcome from all parties - If you wish to make comments regarding these documents, please send  them to public-xmlsec@w3.org<mailto:public-xmlsec@w3.org>.

The list is archived at http://lists.w3.org/Archives/Public/public-xmlsec/

Note that XML Encryption 1.1 was previously at CR but the WG is soliciting review of changes since the previous CR publication, in particular changes made to address newly publicized algorithm security vulnerabilities and to enhance the security considerations section.  Details are noted in the status section of the document.

(4) Review end date.

This Last Call period is for six weeks and will end 16 February 2012.

(5) A reference to the group's decision to make this transition.

The XML Security WG agreed to making these Last Call transitions at its  teleconference on 20 December 2011 teleconference:

http://lists.w3.org/Archives/Public/public-xmlsec/2011Dec/att-0037/minutes-2011-12-20.html#item03

http://lists.w3.org/Archives/Public/public-xmlsec/2011Dec/att-0037/minutes-2011-12-20.html#item04

(6) Evidence that the document satisfies group's requirements. Including a link to requirements

The group is satisfied that it meets its requirements.

XML Security 1.1 Requirements and Design Considerations, http://www.w3.org/TR/2011/WD-xmlsec-reqs-20110303/

XML Security 2.0 Requirements and Design Considerations, http://www.w3.org/2008/xmlsec/Drafts/xmlsec-reqs2/Overview.html

(7) The names of groups with dependencies, explicitly inviting review from them.

We have received review from external parties regarding the security considerations and vulnerabilities addressed in XML Encryption 1.1 but welcome additional review.

(8) Report of any Formal Objections

The Working Group has received no formal objections.

(9) A link to a patent disclosure page.

There are currently no known patent exclusions, the list of which is maintained at http://www.w3.org/2004/01/pp-impl/42458/status

The Working Group has noted the following in the Status of the Document of XML Encryption 1.1:

"Patent disclosures on this specification. W3C has received several patent disclosures regarding this specification and its use of Elliptic Curve cryptography. In accordance with section 7 of the W3C Patent Policy<http://www.w3.org/Consortium/Patent-Policy-20040205/#sec-Exception>, the staff has launched a Patent Advisory Group (PAG)<http://www.w3.org/2011/xmlsec-pag/Overview.html> to address them. Please refer to the PAG charter<http://www.w3.org/2011/02/xmlsec-pag-charter.html> for more details."

regards, Frederick

Frederick Hirsch, Nokia
Chair XML Security

Link to W3C Process regarding Transition Announcement

<http://services.w3.org/xslt?xmlfile=http://www.w3.org/2005/08/01-transitions.html&xslfile=http://www.w3.org/2005/08/transitions.xsl&docstatus=lc-wd-tr>