Developer's Guide to Web Application Security

Now, let’s say we want to send this information to a partner, but we want to

encrypt the credit card information. Following the encryption process laid out by

the XML Encryption specification, the result is shown in Figure 8.11.

Figure 8.11 XML Document after Encryption

<?xml version="1.0"?>

<customer>

<firstname>John</firstname>

<lastname>Doe</lastname>

<creditcard>

<xenc:EncryptedData

xmlns:xenc='http://www.w3.org/2000/11/temp-xmlenc' Type="Element">

<xenc:CipherText>AbCd….wXYZ</xenc:CipherText>

</xenc:EncryptedData>

</creditcard>

</customer>

The encrypted information is replaced by the EncryptedData element, and the

encrypted data is located within the CipherT ...