Re: [xml-dev] XML Signature/Encryption in MSXML 4.0/6.0

[Jonas Mellin <jonas.mellin@his.se>]

Jirka Kosek wrote:
> Hi,
>
> I'm struggling with finding COM component which can be used together
> with MSXML4.0/6.0 for signing and encrypting XML documents. Any hints?
> (Please note that for this project .NET framework can't be used, it has
> to be win32 solution only).
>   
I assume that this is not what you want, but in case.... This is a
possibility, if you want to build something yourself.

I assume you want a tool that enclose you top element into the following
structur
<Encrypted><Document>...</Document><Signature>...</Signature></Encrypted>,
where the Document element is the content that you want to sign and
Signature contains the signature (secure hash digest encrypted with
secret key). You could use PGP and build such a conversion without
severe problems. Essentially, the PGP tools can be used to generate a
signature in a separate file. The XML document and the signature files
can be merged into a single document. When you want to verifiy the
signature, then extract the document and the signature into separate
files and use PGP tools to do the verification. Note that there is no
proper infrastructure for handling keys in PGP, so it really depends on
what you want it for.

Another possibility on the open source side is to use cacert.org
certificates. I am unsure of how to sign files using this. It should be
possible, but the question is what tools are available. The advantage is
that there is an infrastructure for certificates and verification thereof.

/Jonas


> Thanks,
>
> 				Jirka
>
>   


-- 
Carpe Diem!
===
Jonas Mellin, Assistant Professor in Computer Science
School of Humanities and Informatics, Building E-2
University of Skövde, P.O. Box 408, SE-541 28 Skövde, Sweden
Phone: +46 500 448321, Fax: +46 500 448399
PGP Public Key: http://www.his.se/PageFiles/19377/Jonas_Mellin.asc
Email: jonas.mellin@his.se, URL: http://www.his.se/melj, 

----BEGIN GEEK CODE BLOCK----
GCS d s a+ C++ UL++ US++ P++ L++ E++ W++ N+ o K- w++ O- M V-- 
PS- PE+ Y+ PGP t+ 5 X R* tv- b++ DI+ D+ G+ y++++ e++++ h--- r+++
----END GEEK CODE BLOCK----

OpenPGP digital signature