[WSS4J] XML Encryption
"Nachiappan Narayanan" <Nachi-KbPxBdIIuGhWk0Htik3J/[email protected]> Tue, 2 Mar 2004 20:59:34 +0530
| Newsgroups | gmane.text.xml.wss4j |
|---|---|
| Organization | Roxer.com Pvt. Ltd. |
| Message-ID | <006501c4006b$2d17ed60$1f05a8c0@NACHU> |
This is a multi-part message in MIME format. ------=_NextPart_000_0062_01C40099.43C22610 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable All, Im exploring XML Encryption. Im not sure whether my approach towards = XML Encryption is correct: 1. Client Sends the public key to the Server 2. Server Generates the Shared Secret Key 3. Server Encrypts the Shared Secret Key with the Client's Public Key 4. Server Sends the Encrypted Shared Secret Key to the Client 5. Client Decrypts & fetches the Shared Secret Key 6. For each and every SOAP Request, the Client encrypts the SOAP Request = with the Shared Secret Key 7. The Server upon receiving the Encrypted SOAP Request, the server = decrypts with the Shared Secret Key and obtains the original Request. 8. Similarly, the Server Response is encrypted with Shared Secret Key 9. The Server Response is decrypted by the client using the Shared = Secret Key. Is this the one and only mechanisms by which XML Encryption can be = achieved? I think the above procedure is symmetric key XML Encryption. = If so, is there any steps such as this for Asymmetric Key XML = Encryption? Here the Key generation should be automated rite? If i convert any = string into byte array, i get Invalid Key Size exception. Is there any = standard to generate such shared key?=20 Can anyone please help me out? Regards, Nachiappan.N ------=_NextPart_000_0062_01C40099.43C22610 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2> <DIV><FONT face=3DArial size=3D2>All,</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2> Im exploring XML Encryption. Im = not sure=20 whether my approach towards XML Encryption is correct:</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>1. Client Sends the public key to the=20 Server</FONT></DIV> <DIV><FONT face=3DArial size=3D2>2. Server Generates the Shared Secret=20 Key</FONT></DIV> <DIV><FONT face=3DArial size=3D2>3. Server Encrypts the Shared Secret = Key with the=20 Client's Public Key</FONT></DIV> <DIV><FONT face=3DArial size=3D2>4. Server Sends the Encrypted Shared = Secret Key to=20 the Client</FONT></DIV> <DIV><FONT face=3DArial size=3D2>5. Client Decrypts & fetches the = Shared Secret=20 Key</FONT></DIV> <DIV><FONT face=3DArial size=3D2>6. For each and every SOAP = Request, the Client=20 encrypts the SOAP Request with the Shared Secret Key</FONT></DIV> <DIV><FONT face=3DArial size=3D2>7. The Server upon receiving the = Encrypted=20 SOAP Request, the server decrypts with the Shared Secret Key and obtains = the=20 original Request.</FONT></DIV> <DIV><FONT face=3DArial size=3D2>8. Similarly, the Server Response = is encrypted=20 with Shared Secret Key</FONT></DIV> <DIV><FONT face=3DArial size=3D2>9. The Server Response is decrypted by = the client=20 using the Shared Secret Key.</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2> Is this the one and only = mechanisms by which=20 XML Encryption can be achieved? I think the above procedure is symmetric = key XML=20 Encryption. If so, is there any steps such as this for Asymmetric Key = XML=20 Encryption?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2> Here the Key generation should = be automated=20 rite? If i convert any string into byte array, i get Invalid Key Size = exception.=20 Is there any standard to generate such shared key? </FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2> Can anyone please help me = out?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Regards,</FONT></DIV> <DIV><FONT face=3DArial=20 size=3D2>Nachiappan.N</FONT></DIV></FONT></DIV></BODY></HTML> ------=_NextPart_000_0062_01C40099.43C22610-- ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click