- Home
- Download
- News
- Documentation
- FAQ
- XML Digital Signature

- Interop report
- Online Verifier
- Example 1
- Example 2
- Example 3
- Example 4

- XML Encryption

- Interop report

- XML Canonicalization
- Reporting Bugs
- Mailing list

## XML Security Library
XML Signature Interoperability Report

Aleksey Sanin
August 7 2002

IETF/W3C XML Signature WG: XML Signature Interoperability

Features and algorithms | Key Word | Support
Detached Signature | MUST | Y
Enveloping Signature: same document reference with fragment (URI="#Object1") | MUST | Y
Enveloped Signature: same document reference (URI="") with Enveloped Signature Transform . | MUST | Y
SignatureValue generation/validation | MUST | Y
Manifest DigestValue generation/valdiation | MAY | Y
Feature: laxly schema valid Signature element generation | MUST | Y
XPointers '#xpointer(/)' | SHOULD | Y
XPointers '#xpointer(id("ID"))' | SHOULD | Y
XPointers: full suppport | MAY | Y
XPath | SHOULD | Y
the dsig XPath 'here()' function (can be used to implement enveloped signature) | SHOULD | Y
XSLT (note, the child `XSLT` element of Transform has been deprecated.) | MAY | Y
RetrievalMethod (e.g., X509Data) | SHOULD | Y
SHA1 | MUST | Y
Base64 | MUST | Y
HMAC-SHA1 | MUST | Y
DSAwithSHA1 (DSS) | MUST | Y(1)
RSAwithSHA1 | SHOULD | Y
X509 support | SHOULD | Y
minimal (deprecated) | n/a | N
Canonical XML (20010315) | MUST | Y
Canonical XML with comments | SHOULD | Y
Exlusive Canonical XML | SHOULD | Y
Exlusive Canonical XML with comments | SHOULD | Y
Enveloped Signature | MUST | Y
Additional algorithms ( * ) |  |
HMAC-MD5 |  | Y
HMAC-RIPEMD160 |  | Y
XPointer transform |  | Y

(1)Defining DSA key with Seed and PgenCounter is not supported.

Test vectors:
merlin-xmldsig-twenty-three.tar.gz
merlin-xmldsig-sixteen.tar.gz (features, deprecated)
merlin-xmldsig-fifteen.tar.gz (algorithms, deprecated)

Aleksey Sanin