Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [xml-encryption]

Encryption of data represented in XML according to the W3C Specification.

-1
votes
0answers
35 views

Verify XML file signature (xmldsig)

I've gotten an XML file with an enveloped signature inside it. Is there any way I can validate that file, with seeing what is inside that signatures as well? The file contains a ...
1
vote
0answers
27 views

Nature of risk(s) from KeeChallenge XML file stored in cloud at Onedrive

As a noob user of KeePass2 on Windows desktop and Keypass2Android on my phone, supplemented by YubiKey Neo configured for hmac-sha1 challenge response, I noticed that Keepass2Android appears to store ...
1
vote
1answer
49 views

Does the XML signature standard support Ed25519?

https://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-20/#sec-ECKeyValue talks about ECDSA but even the explicit curve parameter stuff won't work with Ed25519 as Ed25519 has a completely different ...
1
vote
0answers
16 views

what does the m parameter in XML Signatures for gnBasis characteristic-two curves represent?

https://www.w3.org/TR/xmldsig-core/#sec-ECParameters defines the same three characters two-field basis's that http://www.secg.org/sec1-v2.pdf#page=107 defines: GN (Gaussian Normal, I guess) TP (...
1
vote
0answers
86 views

trying to understand the elliptic curve format for XML Signatures

https://www.w3.org/TR/xmldsig-core/#sec-ECKeyValue gives the following example of an ECDSA key: ...
2
votes
0answers
195 views

What is the complex Element 'KeyInfo' in the encrypted XML example for?

I'm not sure, if this is a question really about cryptography and whether it would better fit to Stack Overflow, but I try... In my xml example, some elements are encrypted with ...
2
votes
0answers
188 views

XSLT tranform in xmlsignature form, a part of xmldocument? [closed]

I have a HTML page(A Form) where user will enter his details. Details to enter are NameagesalarystateCity Now when user enters all details and click Button then I will create xml file containing the ...
15
votes
3answers
2k views

Is the CBC weakness in XML Encryption a new discovery? Are other applications vulnerable?

The RUB in Germany reports that XML encryption is broken. This is essentially the W3C standard for protecting XML documents from prying eyes. Does this mean that an attacker can only see a single ...