[xacml] Comparing KeyInfos. Forwarded message from john howard.

[Anne Anderson <Anne.Anderson@Sun.com>]

Topic for discussion.  John Howard has been implementing XACML
for Reuters.  -Anne
------- start of forwarded message -------
From: "john howard" <john.howard@inmezzo.com>
To: <Anne.Anderson@sun.com>
Subject: Comparing KeyInfos
Date: Wed, 2 Oct 2002 13:04:25 +0100

Hi Anne,

In a couple of the conformance tests (IIB016, 11B017) there is a requirement to compare KeyInfos.  The comparison is performed as a string-match even though the data type is KeyInfo.  As KeyInfos can be compared in a number of ways the string-match would appear inadequate.  e.g. In the simple case
<ds:KeyInfo>
	<ds:KeyName>jhibbert-key</ds:KeyName>
</ds:KeyInfo>

would not match 
<ds:KeyInfo>
	<ds:KeyName>jhibbert-key</ds:KeyName>
	<ds:KeyValue>....</ds:KeyValue>
</ds:KeyInfo>

Although the KeyInfos are the same.

Is there a need for a keyinfo-match function or is there a more generic object-match that would match based on the data type and therefore be completely extendable.

John.



------- end of forwarded message -------

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692