.NET Framework Security

Verifying an XMLDSIG Signature

We turn our attention now to the process of verifying an XMLDSIG digital signature using the .NET Framework. Signature verification is much easier in general than signature generation, because the only variable in the verification process is finding the correct verification key. The general procedure for verifying an XMLDSIG signature consists of the following steps:

1.

Obtain the XMLDSIG ds:Signature you want to verify as an XmlElement object by using the XML-related classes in the System.Xml namespace. Depending on the method in which your application receives the XMLDSIG signature, you may have to scan an XmlDocument for the ds:Signature element, read the document containing the signature from an on-disk file, ...