RE: [dss] 3.3.5 Process Variant for <TransformedData>, 3.3.6 Process Variant for <DocumentHash>

["Nick Pope" <pope@secstan.com>]

Fine

-----Original Message-----
From: Konrad Lanz [mailto:Konrad.Lanz@labs.cio.gv.at]
Sent: 20 February 2006 18:56
To: Nick Pope; DSS TC List
Subject: [dss] 3.3.5 Process Variant for <TransformedData>, 3.3.6 Process Variant for <DocumentHash>

Dear Nick and all,

please find a first draft of a text suggestion containing the relevant amendments to address the concerns surrounding TransformedData and DocumentHash raised by Nick's email.

best regards
Konrad

3.3.5 Process Variant for <TransformedData>

In the case of an input document which contains <TransformedData> Step 3.3.1 1 is replaced with the following:
1. For each <TransformedData> in <InputDocuments> the server MUST perform the following steps:
    a. The server base64-decodes the data contained within <Base64Data> of <TransformedData> into an octet string.
    b. Omitted.
    c. The hash over of the octet stream extracted in step a is calculated.
    d. as in 3.3.1 step 1d amended as follows
         i. replace the word  "<Document>" by <TransformedData> otherwise as in as 3.3.1 step 1d.i..
         ii. replace the word  "<Document>" by <TransformedData> otherwise as in as 3.3.1 step 1d.ii..
         iii. same as 3.3.1 step 1d.iii.
         iv. same as 3.3.1 step 1d.iv.
         v.  The <ds:Transforms> element is set to the sequence of transforms indicated by the client in the <ds:Transforms> element within the <TransformedData>. This sequence MUST describe the effective transform as a reproducible procedure from parsing until digest input.

3.3.6 Process Variant for <DocumentHash>
In the case of an input document which is provided in the form of a hash value in <DocumentHash> Step 3.3.1 1 is replaced with the following:
1. For each <DocumentHash> in <InputDocuments> the server MUST perform the following steps:
    a. Omitted.
    b. Omitted.
    c. Omitted.
    d. as in 3.3.1 step 1d updated as follows
         i. replace the word  "<Document>" by <DocumentHash> otherwise as in as 3.3.1 step 1d.i..
         ii. replace the word  "<Document>" by <DocumentHash> otherwise as in as 3.3.1 step 1d.ii..
         iii. The <ds:DigestMethod> element is set to the value of <ds:DigestMethod> in <DocumentHash>.
         iv. The <ds:DigestValue> element is set to the value of <ds:DigestValue> in <DocumentHash>.
         v.  The <ds:Transforms> element is set to the sequence of transforms indicated by the client in the <ds:Transforms> element within <DocumentHash>, if any such transforms are indicated by the client. This sequence MUST describe the effective transform as a reproducible procedure from parsing until hash.