RE: newbie Question about PKCS#7
"Manoj K. Srivastava" <[email protected]> Fri, 17 May 2002 01:13:02 -0700
| Newsgroups | gmane.ietf.xmldsig |
|---|---|
| Message-ID | <[email protected]> |
Hi John, You are right. Please see the attached signed xml. The file that was signed is also attached. Thanks, Manoj -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of John Messing Sent: Thursday, May 16, 2002 9:10 PM To: Christian Geuer-Pollmann; Tom Gindin; Ed Simon Cc: Roman Huditsch; [email protected] Subject: Re: newbie Question about PKCS#7 Wouldn't you need to include the message digest of the file in the signed data as well and then sign the reference and the message digest as signed info? ----- Original Message ----- From: "Christian Geuer-Pollmann" <[email protected]> To: "Tom Gindin" <[email protected]>; "Ed Simon" <[email protected]> Cc: "Roman Huditsch" <[email protected]>; <[email protected]> Sent: Thursday, May 16, 2002 11:05 AM Subject: Re: newbie Question about PKCS#7 > > > --On Donnerstag, 16. Mai 2002 11:28 -0400 Tom Gindin > <[email protected]> > wrote: > > > IMHO, XML Signature is not "the new way of doing signatures". It's > > the new, and hopefully best, way of signing documents which include > > XML. Do you expect people to sign pure binary data using XML > > Signature rather than CMS? > > I would say XML Signature is a good way for creating digital > signatures, even detached signatures which create arbitrary binary > content. Even if there is no hint on what exactly IS the thing being > signed, the signature itself has rich semantics. But of course, XML > Signature will have no great future in environments where storage size > or computing power are limited. > > > Maybe I'm confused about the standard, but I don't see a "Type" > > value for transparent binary data or a transform for it. Does a > > Reference with both Type and Transforms omitted mean binary? > > I would say yes. Signing a GIF or something similar is > > <Reference URI="1.gif" (or URI="protocol://host/1.gif"> > and no transforms. > > Other opinions? > > > Christian > >
logo-text.gif
(application/octet-stream, 3.3 KB) - not displayed
logo-textSigned.xml
(text/xml, 3.5 KB)
<?xml version="1.0"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#" Id="InfomosaicPY5whk73qwhq46d57dgpjmedsgdzjg"><!--XML Signature produced by Infomosaic SecureXML, http://www.infomosaic.net--><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference Id="REF_Detached_InfomosaicPY5whk73qwhq46d57dgpjmedsgdzjg" URI="logo-text.gif"><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>2s8N0TAS3+pvFgz7dXd2HBAeOGM=</DigestValue></Reference></SignedInfo><SignatureValue>Nuokf/uUCQ2xPzxTafCkz9jh1H+DjFbW2VUXMRP1gGCyeFX7VeY0G+ZcJE49DGsOL2rC00piu5nUkFejeettBSu5InsZezh7d4yEBgFCpYp1UwFVCDdIMqxSb5jFN7jqgiKkHxfPzuo9Nwe05m5IVIlPaygvgrutSFnX1sQScAY=</SignatureValue><KeyInfo><KeyValue><RSAKeyValue><Modulus>5QUjr2cBmVW2n1Xh8zbISd1Ee4jfBpU9YtEaaSjzhA7MRchDvcPz27gyZ3noHV6A3yVGRkY/WajHObTs96CLR9O5MH3Hm4PQ05VuR2gvdD9yLBlwAKjlgdPASDWKtNShd1FyCSIycwgzSaLKjAGdsVBY0qGO4tt2+WeNY3CH50U=</Modulus><Exponent>AQAB</Exponent></RSAKeyValue></KeyValue><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></Signature>