RE: Canonicalization

Example 2 below is incorrect for the W3C Canonicalization draft.  It very
explictly states that the default name space is NEVER used.  Thus listing 2
is very wrong as it uses the default name space.  

If you think about it it makes sense as the canonicalization algorithm needs
to make sure that all three of the following produce the same output:

<digsig:Signature xmlns:digsig="http://www.w3.org/Signature/core-19991020">
  <digsig:SignedInfo>
  .....
  </digsig:SignedInfo>
</digsig:Signature>

<Signature xmlns="http://www.w3.org/Signature/core-19991020">
  <SignedInfo>
  ....
  </SignedInfo>
<Signature>

<a1:Signature xmlns:a1="http://www.w3.org/Signature/core-19991020">
  <a2:SignedInfo xmlns:a2="http://www.w3.org/Signature/core-19991020">
  ....
  </a2:SignedInfo>
</a1:Signature>

These are all "the same" in XML and thus need to produce the same hash
value.

jim

> -----Original Message-----
> From: Ed Simon [mailto:ed.simon@entrust.com]
> Sent: Sunday, October 24, 1999 3:48 PM
> To: 'w3c-ietf-xmldsig@w3.org'
> Subject: Re: Canonicalization
> 
> 
> As I understand the W3C XML Canonicalization draft, the
> canonicalized form of the <SignedInfo> element in this context
> 
> Listing 1:
> <Signature  xmlns="http://www.w3.org/Signature/core-19991020">
> 	<SignedInfo>
> 		<SignatureAlgorithm name="rsaWithSHA-1"/> 
> 		<ObjectReference>
> 			<Location HREF="http://www.w3.org"/>
> 			<Type>text/html; charset="us=ascii"</Type>
> 			<DigestAlgorithm name="sha-1"/>
> 			<DigestValue name="abc123def"/>
> 		</ObjectReference>
> 	</SignedInfo>
> 	<SignatureValue encoding="urn:base64">
> 		dd2323dd
> 	</SignatureValue>
> 	<KeyInfo>
> 		<KeyName>Solo</KeyName>
> 	</KeyInfo>
> </Signature>
> 
> would be
> 
> Listing 2:
> 	<SignedInfo>
> 		<SignatureAlgorithm name="rsaWithSHA-1"/> 
> 		<ObjectReference>
> 			<Location HREF="http://www.w3.org"/>
> 			<Type>text/html; charset="us=ascii"</Type>
> 			<DigestAlgorithm name="sha-1"/>
> 			<DigestValue name="abc123def"/>
> 		</ObjectReference>
> 	</SignedInfo>
> 
> which means no changes.  However, in typical apps, we might see
> 
>

Received on Sunday, 24 October 1999 21:56:03 UTC