The XML Security Working Group has published a First Public Working Draft of "XML Encryption 1.1 CipherReference Processing using 2.0 Transforms" specification. This specification brings the benefits of the XML Signature 2.0 transform processing model to XML Encryption, reducing the attack surface and simplifying the processing model. Related 2.0 specifications are in Last Call, including XML Signature 2.0, Canonical XML 2.0 and the XML Signature Streaming Profile of XPath 1.0. The XML Security WG also has 1.1 specifications in Candidate Recommendation, including XML Signature 1.1, XML Encryption 1.1, XML Signature Properties, and XML Security Generic Hybrid Ciphers.
To address patent disclosures related to the XML Signature 1.1 and 2.0 and XML Encryption 1.1 specifications, W3C has chartered a Patent Advisory Group that is in progress. Learn more about W3C's Security Activity.
No comments:
Post a Comment