diff options
Diffstat (limited to 'docs/xmldsig.html')
-rw-r--r-- | docs/xmldsig.html | 1200 |
1 files changed, 467 insertions, 733 deletions
diff --git a/docs/xmldsig.html b/docs/xmldsig.html index 25f90129..4e008862 100644 --- a/docs/xmldsig.html +++ b/docs/xmldsig.html @@ -68,833 +68,567 @@ and get detailed report on what and how was signed. </p> <div align="center"> <table style="width: 85%;" border="1" cellpadding="2" cellspacing="2"><tbody> <tr> -<td style="width: 40%;" align="left" valign="top"><b>Features -and -algorithms<br></b></td> - <td align="left" valign="top"> <b>XMLSec with -OpenSSL </b> </td> - <td style="vertical-align: top;"><b>XMLSec with GnuTLS</b></td> - <td style="vertical-align: top;"> <b>XMLSec with NSS</b> - </td> - <td style="vertical-align: top;"> <b>XMLSec with -MSCrypto</b> </td> - </tr> -<tr> -<td style="width: 40%;" align="left" valign="top"> <span class="link-def">Detached</span> -Signature<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top"><b>Features and algorithms</b></td> + <td valign="top"><b>XMLSec with OpenSSL</b></td> + <td valign="top"><b>XMLSec with GnuTLS</b></td> + <td valign="top"><b>XMLSec with GCrypt</b></td> + <td valign="top"><b>XMLSec with NSS</b></td> + <td valign="top"><b>XMLSec with MSCrypto</b></td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top"> <span class="link-def">Enveloping</span> -Signature: same document reference with fragment -(URI="#Object1")<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">Detached Signature</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top"> <span class="link-def">Enveloped</span> -Signature: same document reference (URI="") with Enveloped Signature -Transform .<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">Enveloping Signature: +same document reference with fragment (URI="#Object1")</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">SignatureValue -generation/validation<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">Enveloped Signature: +same document reference (URI="") with Enveloped Signature Transform</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">Manifest -DigestValue -generation/valdiation<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">SignatureValue +generation/validation</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">Feature: -laxly schema -valid -Signature element generation<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">Manifest DigestValue +generation/valdiation</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">XPointers -'#xpointer(/)'<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">Laxly schema valid Signature +element generation</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">XPointers -'#xpointer(id("<em>ID</em>"))'<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">XPointers '#xpointer(/)'</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">XPointers: -full suppport </td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">XPointers '#xpointer(id("<em>ID</em>"))'</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">XPath - <br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">XPointers: full suppport</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">the -dsig XPath 'here()' -function (can be used to implement enveloped signature)<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">XPath</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">XSLT -(note, the child <code> -XSLT</code> -element of Transform has been deprecated.)<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">the dsig XPath 'here()' +function (can be used to implement enveloped signature)</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> +<tr> +<td style="width: 40%;" align="left" valign="top">XSLT transform</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> <td style="width: 40%;" align="left" valign="top">RetrievalMethod -(e.g., -X509Data)<br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +(e.g. X509Data)</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">SHA1 - <br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">SHA1</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">Base64 - <br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">Base64</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">HMAC-SHA1 - <br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">HMAC-SHA1</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">DSAwithSHA1<br> -(DSS) <br> -</td> - <td align="left" valign="top">Y<a href="#dsa-sha1"><sup>(1)</sup></a> - <br> -</td> - <td style="vertical-align: top;">N<br> +<td style="width: 40%;" align="left" valign="top">DSA with SHA1 (DSS) <a href="#dsa-sha1"><sup>(1)</sup></a> </td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">RSAwithSHA1 - <br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">RSA with SHA1</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" valign="top">X509 support<br> -</td> - <td valign="top">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" valign="top">X509 support</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">N</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">Minimal -C14N (deprecated)<br> -</td> - <td align="left" valign="top">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="width: 40%;" valign="top">X509 CRL support</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">Y</td> +</tr> +<tr> +<td style="width: 40%;" align="left" valign="top">Minimal C14N (deprecated)</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="width: 40%;" align="left" valign="top"> <a href="http://www.w3.org/TR/xml-c14n">Canonical XML 1.0</a> </td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> <td style="width: 40%;" align="left" valign="top"> <a href="http://www.w3.org/TR/xml-exc-c14n">Exlusive Canonical XML 1.0</a> </td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> <td style="width: 40%;" align="left" valign="top"> <a href="http://www.w3.org/TR/xml-c14n11/">Canonical XML 1.1</a> </td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">Enveloped -Signature <br> -</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;"><br></td> - </tr> +<td style="width: 40%;" align="left" valign="top">Enveloped Signature</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> </tbody></table> <div align="left"> <br><h4 style="text-align: center;">Additional XML Security Algorithms (<a href="http://www.ietf.org/rfc/rfc4051.txt">RFC 4051</a>)</h4> <table style="width: 85%; text-align: left; margin-left: auto; margin-right: auto;" border="1" cellpadding="2" cellspacing="2"><tbody> <tr> -<td style="width: 40%;" align="left" valign="top"><b>Features -and -algorithms<br></b></td> - <td align="left" valign="top"> <b>XMLSec with -OpenSSL </b> </td> - <td style="vertical-align: top;"><b>XMLSec with GnuTLS</b></td> - <td style="vertical-align: top;"> <b>XMLSec with NSS</b> - </td> - <td style="vertical-align: top;"> <b>XMLSec with -MSCrypto</b> </td> - </tr> -<tr> -<td style="vertical-align: top; width: 40%;">MD5<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top"><b>Features and algorithms<br></b></td> + <td valign="top"><b>XMLSec with OpenSSL</b></td> + <td valign="top"><b>XMLSec with GnuTLS</b></td> + <td valign="top"><b>XMLSec with GCrypt</b></td> + <td valign="top"><b>XMLSec with NSS</b></td> + <td valign="top"><b>XMLSec with MSCrypto</b></td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">SHA224<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">MD5</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">SHA256<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">SHA224</td> + <td valign="top">Y</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">SHA384<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">SHA256</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">SHA512<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">SHA384</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">HMAC-MD5<br> -</td> - <td align="left" valign="top">Y <br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">SHA512</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">HMAC-SHA224<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">HMAC-MD5</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> +<tr> +<td style="vertical-align: top; width: 40%;">HMAC-SHA224</td> + <td valign="top">Y</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">HMAC-SHA256</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">HMAC-SHA384</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> <td style="width: 40%;" align="left" valign="top">HMAC-SHA512</td> - <td align="left" valign="top">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="width: 40%;" valign="top">HMAC-RIPEMD160<br> -</td> - <td valign="top">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="width: 40%;" valign="top">HMAC-RIPEMD160</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">RSA-MD5<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">RSA-MD5</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">N</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">RSA-SHA224<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">RSA-SHA224</td> + <td valign="top">Y</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">RSA-SHA256<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">RSA-SHA256</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">RSA-SHA384<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">RSA-SHA384</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">RSA-SHA512<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">RSA-SHA512</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">RSA-RIPEMD160</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">ECDSA-SHA1<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">ECDSA-SHA1</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">ECDSA-SHA224<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">ECDSA-SHA224</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">ECDSA-SHA256</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">ECDSA-SHA384</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">ECDSA-SHA512</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">ESIGN-SHA1<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">ESIGN-SHA1</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">ESIGN-SHA224</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">ESIGN-SHA256</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">ESIGN-SHA384</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">ESIGN-SHA512</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">Minimal -C14N (deprecated) </td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">Minimal C14N (deprecated)</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="width: 40%;" align="left" valign="top">XPointer -transform<br> -</td> - <td align="left" valign="top">Y <br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - <td style="vertical-align: top;">Y<br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top">XPointer transform</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> + <td valign="top">Y</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">ARCFOUR -Encryption<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">ARCFOUR Encryption</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">Camellia -Block -Encryption 128<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">Camellia Block Encryption 128</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">Camellia -Block -Encryption 192</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">Camellia Block Encryption 192</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">Camellia -Block -Encryption 256<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">Camellia Block Encryption 256</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">Camellia -Key Wrap 128<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">Camellia Key Wrap 128</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> <td style="vertical-align: top; width: 40%;">Camellia Key Wrap 192</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">Camellia -Key Wrap 256<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">Camellia Key Wrap 256</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">PSEC-KEM<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - </tr> +<td style="vertical-align: top; width: 40%;">PSEC-KEM</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> +</tr> </tbody></table> -<div align="left"> <br><h4 style="text-align: center;">Other algorithms</h4> +<div align="left"> +<h4 style="text-align: center;">Other algorithms</h4> <table style="width: 85%; text-align: left; margin-left: auto; margin-right: auto;" border="1" cellpadding="2" cellspacing="2"><tbody> <tr> -<td style="width: 40%;" align="left" valign="top"><b>Features -and -algorithms<br></b></td> - <td align="left" valign="top"> <b>XMLSec with -OpenSSL </b> </td> - <td style="vertical-align: top;"><b>XMLSec with GnuTLS</b></td> - <td style="vertical-align: top;"> <b>XMLSec with NSS</b> - </td> - <td style="vertical-align: top;"> <b>XMLSec with -MSCrypto</b> </td> - </tr> -<tr> -<td style="vertical-align: top; width: 40%;">GOST94 digests<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">Y<a href="#gost-mscrypto"><sup>(2)</sup></a><br> -</td> - </tr> +<td style="width: 40%;" align="left" valign="top"><b>Features and algorithms</b></td> + <td valign="top"><b>XMLSec with OpenSSL</b></td> + <td valign="top"><b>XMLSec with GnuTLS</b></td> + <td valign="top"><b>XMLSec with GCrypt</b></td> + <td valign="top"><b>XMLSec with NSS</b></td> + <td valign="top"> +<b>XMLSec with MSCrypto</b> </td> +</tr> <tr> -<td style="vertical-align: top; width: 40%;">GOST2001 signatures<br> -</td> - <td style="vertical-align: top;">N<br> +<td style="vertical-align: top; width: 40%;">GOST94 digests</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">Y<a href="#gost-mscrypto"><sup>(2)</sup></a> </td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">N<br> -</td> - <td style="vertical-align: top;">Y<a href="#gost-mscrypto"><sup>(2)</sup></a><br> +</tr> +<tr> +<td style="vertical-align: top; width: 40%;">GOST2001 signatures</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">N</td> + <td valign="top">Y<a href="#gost-mscrypto"><sup>(2)</sup></a> </td> - </tr> +</tr> </tbody></table> <br><br><a name="dsa-sha1"></a><sup>(1)</sup> Defining <a href="http://www.w3.org/TR/xmldsig-core/#sec-DSAKeyValue"> DSA key</a> with Seed and PgenCounter is not supported. |