Re: [Fwd: [dss] More on EnvelopingSignature]

[Konrad Lanz <Konrad.Lanz@labs.cio.gv.at>]

Dear Juan Carlos and all,

Juan Carlos Cruellas wrote:

> [...] the alignment RefURI / ObjId could
> be broken [...]

I'm not entirely sure if we can or should ask for an alignment of RefURI 
/ ObjId at all.

Please consider the following Signature (part of the example in my last 
email).

   <Signature xmlns="http://www.w3.org/2000/09/xmldsig#";>
     <SignedInfo>
       <CanonicalizationMethod Algorithm="..."/>
       <SignatureMethod Algorithm="..."/>

       <Reference Id="RefId2" URI="#data"> ... </Reference>

       <Reference Id="RefId3" URI="#xpointer(ID('data1'))"> ...  
</Reference>

       <Reference Id="RefId5" URI="#xpointer(ID('dsObjIdC'))/XYZ/XYZ"> 
... </Reference>

     </SignedInfo>
     <SignatureValue>...==</SignatureValue>

     <Object Id="ObjIdA">
     <ns1:XYZ xmlns:ns1="http://ns.com#ns1";>
        <ns1:XYZ ID="data"/>
     </ns1:XYZ>
     </Object>

     <Object>
     <ns1:XYZ xmlns:ns1="http://ns.com#ns1";>
        <ns1:XYZ Id="data1">
          Text and <!-- Comments -->
        </ns1:XYZ>
     </ns1:XYZ>
     </Object>

     <Object Id="ObjIdC">
     <ns1:XYZ xmlns:ns1="http://ns.com#ns1";>
        <ns1:XYZ/>
     </ns1:XYZ>
     </Object>

   </Signature>

best regards

Konrad