[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: md5sum / sha1sum for XML?


richard salz
On Wed, 2006-07-12 at 21:50 -0400, Richard Salz wrote:
> Actually, look at 'exclusive canonicalization.'  Interop shouldn't be a 
> problem.  It's c14n modified to handle the case of embedding your payload 
> within some other XML (e.g., SOAP).

Except that it's the ancestry that's of little interest Rich?
'applied to a subdocument, includes the subdocument's ancestor context
including all of the namespace declarations and attributes in the "xml:"
namespace.'

I'm transporting a document from server A to B.
The wrapper is of import insofar as metadata is concerned.
the 'payload' is my interest. 

I'm pretty convinced that md5sum (bit like me) is pretty old 'ish,

  I'm looking for the younger prettier replacement. 
Does xml sig provide the reassurance that md5sum did?
http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/#def-Integrity
<quote>"The property that data has not been changed, destroyed, or lost
in an unauthorized or accidental manner." [SEC] A simple checksum can
provide integrity from incidental changes in the data; message
authentication is similar but also protects against an active attack to
alter the data whereby a change in the checksum is introduced so as to
match the change in the data. </quote>

Seems to be about right?  digSig == md5sum for y21K?
I want the metadata to include the magic signature,
then the payload, as sent, and as verified by the author(ity) 
and me (as cynic) at the receiving end?

Do we have implementations and experience that says it works?



-- 
Regards, 

Dave Pawson
XSLT + Docbook FAQ
http://www.dpawson.co.uk


PURCHASE STYLUS STUDIO ONLINE TODAY!

Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced!

Buy Stylus Studio Now

Download The World's Best XML IDE!

Accelerate XML development with our award-winning XML IDE - Download a free trial today!

Don't miss another message! Subscribe to this list today.
Email
First Name
Last Name
Company
Subscribe in XML format
RSS 2.0
Atom 0.3
 

Stylus Studio has published XML-DEV in RSS and ATOM formats, enabling users to easily subcribe to the list from their preferred news reader application.


Stylus Studio Sponsored Links are added links designed to provide related and additional information to the visitors of this website. they were not included by the author in the initial post. To view the content without the Sponsor Links please click here.

Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member
Stylus Studio® and DataDirect XQuery ™are products from DataDirect Technologies, is a registered trademark of Progress Software Corporation, in the U.S. and other countries. © 2004-2013 All Rights Reserved.