Secure XML: The New Syntax for Signatures and Encryption

Chapter 11. Profiling XMLDSIG for Applications

Any particular application of XMLDSIG requires a specific profiling of XMLDSIG. That is, it requires a specification of the following issues:

• How the signature or signatures fit syntactically into the application documents and/or protocol messages

• What the signature or signatures mean semantically

• What specifications or limits apply to the composition and use of the signature or signatures such as limitations on algorithms, types of keying information, ways to extend them (if allowed), and so on

The XMLDSIG standard merely provides cryptographic linking between signed data and the key used to sign that ...