Cryptography Stack Exchange
Cryptography Stack Exchange

Questions tagged [xml-encryption]

Encryption of data represented in XML according to the W3C Specification.

Encryption of data represented in XML.

Relevant links:

8 questions
15
votes
3 answers

Is the CBC weakness in XML Encryption a new discovery? Are other applications vulnerable?

The RUB in Germany reports that XML encryption is broken. This is essentially the W3C standard for protecting XML documents from prying eyes. Does this mean that an attacker can only see a single message, or that they can actually infer the…
makerofthings7
  • 2,631
  • 1
  • 22
  • 37
2
votes
0 answers

What is the complex Element 'KeyInfo' in the encrypted XML example for?

I'm not sure, if this is a question really about cryptography and whether it would better fit to Stack Overflow, but I try... In my xml example, some elements are encrypted with xml-enc. I got this xml from a customer and changed attribute names and…
MichaelW
  • 1,517
  • 1
  • 14
  • 26
2
votes
0 answers

XSLT tranform in xmlsignature form, a part of xmldocument?

I have a HTML page(A Form) where user will enter his details. Details to enter are NameagesalarystateCity Now when user enters all details and click Button then I will create xml file containing the user details like…
Mr.Jain
  • 21
  • 2
1
vote
0 answers

Verify XML digital signature

I'm trying to figure out how to verify an XML digital signature. I have received a signed XML response (in string) in following format:
mdbhal
  • 11
  • 1
1
vote
0 answers

Nature of risk(s) from KeeChallenge XML file stored in cloud at Onedrive

As a noob user of KeePass2 on Windows desktop and Keypass2Android on my phone, supplemented by YubiKey Neo configured for hmac-sha1 challenge response, I noticed that Keepass2Android appears to store an xml file on Onedrive (at least it looks that…
greybeered
  • 11
  • 1
1
vote
1 answer

Does the XML signature standard support Ed25519?

https://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/#sec-ECKeyValue talks about ECDSA but even the explicit curve parameter stuff won't work with Ed25519 as Ed25519 has a completely different equation with different equations for point doubling /…
neubert
  • 2,969
  • 1
  • 29
  • 58
1
vote
0 answers

what does the m parameter in XML Signatures for gnBasis characteristic-two curves represent?

https://www.w3.org/TR/xmldsig-core/#sec-ECParameters defines the same three characters two-field basis's that http://www.secg.org/sec1-v2.pdf#page=107 defines: GN (Gaussian Normal, I guess) TP (Trinomial Basis) PP (Pentanomial Basis) In…
neubert
  • 2,969
  • 1
  • 29
  • 58
1
vote
0 answers

trying to understand the elliptic curve format for XML Signatures

https://www.w3.org/TR/xmldsig-core/#sec-ECKeyValue gives the following example of an ECDSA key: …
neubert
  • 2,969
  • 1
  • 29
  • 58