[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

XML DSIG schema validation performance

• To: xml-dev@l..., security-dev@x...
• Subject: XML DSIG schema validation performance
• From: Jorge Ortiz Claver <jorge.ortiz@t...>
• Date: Wed, 06 Jul 2005 10:42:26 +0200
• User-agent: Mozilla Thunderbird 0.9 (Windows/20041103)

Hi,

I have a XML DSIG enveloping document I need to validate against its schema.

I´m using Apache Xerces 2.6.2 for schema validation (full schema 
validation). Everything works fine but process takes about 10 seconds. 
Using the same class with other XML documents (even using very complex 
schemas like UBL standards), validation never takes more than 2 or 3 
seconds (start JVM, locate class, create parser, open file, etc.).

Has anyone any experience validating this type of documents? I´d really 
appreciate any advice or idea.

Thanks in advance
Jorge Ortiz

<?xml version="1.0" encoding="UTF-8"?>
<ds:Signature
	xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd">

<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></ds:CanonicalizationMethod>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:SignatureMethod>
<ds:Reference URI="#data1">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod>
<ds:DigestValue>xbF0V2YW4wwBEpnzwHcOZDtFLi0=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
Ce7TJZYv6e5RQ0SubTtl4EprFXBkLZhNy9YDa/yRD4NzrXiOx/pj7/jMYZYQbl5gHj0tW6ooYtVo
sC0GTJ+tCW3n8Yl//c9IRDC5lAItaki2ktxLm7AlQ514TzYbNVxPB/NXlp5c+VynAf7ehCDeVZQ1
D+WR+H23ylH5prwCv9U=
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
<ds:KeyValue>
<ds:RSAKeyValue>
<ds:Modulus>
9pKb1lu9r3DyoP9Vy9Ac3brTyWKSCXjT+npp5XaePOOOeazOguiOB2gXvmay8ZOBvuZrEmiGcUA9
abvcW2vZeuYIyvK48gvVmdWao6r3ZjBpvS7ulBSTxpgHNjxMmzpwA7gsSElzOUHT0HMXWfN7zwO6
oudKlNGBWFZsQ9a6FQE=
</ds:Modulus>
<ds:Exponent>AQAB</ds:Exponent>
</ds:RSAKeyValue>
</ds:KeyValue>
</ds:KeyInfo>
<ds:Object Id="data1">
.......
</ds:Object>
</ds:Signature>

• Follow-Ups:
  • Re: XML DSIG schema validation performance
    • From: ht@i... (Henry S. Thompson)

• Prev by Date: [ANN] A World Class XML Conference - Tri-XML, July 28-30 (Register today!)
• Next by Date: Re: XML DSIG schema validation performance
• Previous by thread: [ANN] A World Class XML Conference - Tri-XML, July 28-30 (Register today!)
• Next by thread: Re: XML DSIG schema validation performance
• Index(es):
  • Date
  • Thread