OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help



   Re: [xml-dev] XML Digital Signature

[ Lists Home | Date Index | Thread Index ]
  • To: Roshan Mani <roshanmani@safescrypt.com>
  • Subject: Re: [xml-dev] XML Digital Signature
  • From: Farrukh Najmi <Farrukh.Najmi@Sun.COM>
  • Date: Wed, 29 Jun 2005 12:15:09 -0400
  • Cc: xml-dev@lists.xml.org
  • In-reply-to: <iss.cc046fb.59f1.42c22b5d.ab09c.9b@relay24.sun.com>
  • References: <iss.cc046fb.59f1.42c22b5d.ab09c.9b@relay24.sun.com>
  • User-agent: Mozilla Thunderbird 0.8 (X11/20040913)

Roshan Mani wrote:

>Has anyone on this list worked on XML and Digital Signatures? I have a team
>that's doing some work on this area using the MS XML toolkit and we've run
>into a wall with the way XML handles Private Key requests for creating a
>signature using a Crypto USB Token..
>If anyone on this forum has some ideas on this topic, let me know and I can
>give more details on what we're doing and the exact nature of our problem..
>Would appreciate all the help we can get on this!
It seems I live and breath XML Digital Signatures these days in my work 
on freebXML Registry open source project :-) :


However, all that I do is within the Java Platform and specifically J2EE 
and Java Web Services.

My experience with Java platform and XML DSIG is decidedly good. There 
is a standard Java API for XML Digital Signatures:


The above API is now an approved JCP standard.

It has several implementations but they should all be the same API. I 
used the one from JWSDP 1.6:


which is a free download.

I also used the XML Web Services Security (XWSS) API provided in JWSDP 
1.6 which provided
me with out of box support for OASIS Web Services Security standard:


and the XWSS implementation has been through numerous interop tests and 
I believe also supports
WS-I Basic Security Profile 1.0.

And I never hit a brick wall any where.

So, if you want a totally standards based approach to developing XML 
Digital Signature based apps
then you may want to consider switching to Java platform.

I would be glad to share experience if you are open to  Java platform for
your project.

HTH. Best of luck in your implementation.

Farrukh Najmi

Coming to Java ONE 2005? If so check out Sun's Service Registry at Booth #802 in the Java ONE Pavillion.

Sun's Service Registry Web Site:

Press Release:

fn:Farrukh Najmi


News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 2001 XML.org. This site is hosted by OASIS