[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: md5sum / sha1sum for XML?

• To: davep@d..., xml-dev@l...
• Subject: Re: md5sum / sha1sum for XML?
• From: Winchel 'Todd' Vincent III <winchel@m...>
• Date: Wed, 12 Jul 2006 15:46:55 -0400 (GMT-04:00)
• Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=dk20050327; d=mindspring.com; b=qoztT9Uk0CiQ7uCq8QzQztxhpT1ps3BLsmVkcPV9rGT53gMXbPJ0Y87XrItxdzyZ; h=Message-ID:Date:From:Reply-To:To:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:X-Mailer:X-ELNK-Trace:X-Originating-IP;
• Reply-to: Winchel 'Todd' Vincent III <winchel@m...>

XML Signatures and Canonical XML may be helpful to you.

http://www.w3.org/TR/xml-c14n

http://www.xml.com/pub/a/2001/08/08/xmldsig.html

The abstract from the c14n spec:

Any XML document is part of a set of XML documents that are logically equivalent within an application context, but which vary in physical representation based on syntactic changes permitted by XML 1.0 [XML] and Namespaces in XML [Names]. This specification describes a method for generating a physical representation, the canonical form, of an XML document that accounts for the permissible changes. Except for limitations regarding a few unusual cases, if two documents have the same canonical form, then the two documents are logically equivalent within the given application context. Note that two documents may have differing canonical forms yet still be equivalent in a given context based on application-specific equivalence rules for which no generalized XML specification could account.

Hope this helps,

Todd

===========================
Winchel "Todd" Vincent III
<xmlLegal> http://www.xmllegal.org/ 
Phone : 404.822.4668
Fax     : 770.216.1633
Email : Todd.Vincent@x...


-----Original Message-----
>From: Dave Pawson <davep@d...>
>Sent: Jul 12, 2006 3:32 PM
>To: xml-dev@l...
>Subject:  md5sum / sha1sum for XML?
>
>I'm trying to verify that an instance hasn't been messed with
>whilst being sent from machine A to B.
>
>With ASCII or even binary, I'm happily using md5sum for this purpose,
>checking both content and order.
>
>Unfortunately the payload (with the checksum) is wrapped
>in further metadata (including the md5sum) which has
>to be stripped off at the receiving end. 
>
>With the XML I'm bothered that parsing it and serialising it
>will mess up this value. Particularly since this is of
>necessity on a Microsoft platform, using their parser.
>
>Has anyone tried this please, if so what were the issues.
>
>
>TIA
>
>
>-- 
>Regards, 
>
>Dave Pawson
>XSLT + Docbook FAQ
>http://www.dpawson.co.uk
>
>
>-----------------------------------------------------------------
>The xml-dev list is sponsored by XML.org <http://www.xml.org>, an
>initiative of OASIS <http://www.oasis-open.org>
>
>The list archives are at http://lists.xml.org/archives/xml-dev/
>
>To subscribe or unsubscribe from this list use the subscription
>manager: <http://www.oasis-open.org/mlmanage/index.php>
>

• Follow-Ups:
  • Re: md5sum / sha1sum for XML?
    • From: Richard Salz <rsalz@u...>

• Prev by Date: md5sum / sha1sum for XML?
• Next by Date: RE: The Best Technologies Don't Win
• Previous by thread: md5sum / sha1sum for XML?
• Next by thread: Re: md5sum / sha1sum for XML?
• Index(es):
  • Date
  • Thread