What exactly is canonicalised

• From: Tarun Pinto Pereira <tarun_pinto@hotmail.com>
• Date: Sat, 5 Jul 2003 21:07:29 +0100
• To: <w3c-ietf-xmldsig@w3.org>
• Message-ID: <Law11-OE31D0f0zJQD5000334d5@hotmail.com>

Hi,
The answer to this question may be in the XML signature documentation, but I
could not find it.
I am a bit confused as to what parts of the signed document are exactly
canonicalised. Section 4.2.1 states that the "CanonicalizationMethod is a
required element that specifies the canonicalization algorithm applied to
the SignedInfo element prior to performing signature calculations".

But what about the method being applied to elements prior to digest
calculations. Would not a slight variation in the bits of these elements
(the reason for the canonical transform) produce different digests? Are the
elements, for which digests are calculated, also passed thru a canonical
transform prior to digest calculation?

Thanks,
Tarun.


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.493 / Virus Database: 292 - Release Date: 6/26/2003

Received on Saturday, 5 July 2003 16:07:35 UTC