<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000000">
<font size="-1"><font face="Helvetica, Arial, sans-serif">Hi,<br>
<br>
I would be very grateful if someone can tell me what is the real
transformation that xmldsig#enveloped-signature does. In other words:<br>
<br>
I have a simple XML document to sign:<br>
<br>
<?xml version="1.0" encoding="ISO-8859-1"?><br>
<document><br>
<item><br>
<subItem>123456</</font></font><font size="-1"><font
face="Helvetica, Arial, sans-serif">subItem</font></font><font
size="-1"><font face="Helvetica, Arial, sans-serif">><br>
</item><br>
</document><br>
<br>
And I sign it using the template file for XMLSec:<br>
<br>
<?xml version="1.0" encoding="ISO-8859-1"?><br>
<</font></font><font size="-1"><font
face="Helvetica, Arial, sans-serif">document</font></font><font
size="-1"><font face="Helvetica, Arial, sans-serif">><br>
<item><br>
<</font></font><font size="-1"><font
face="Helvetica, Arial, sans-serif">subItem</font></font><font
size="-1"><font face="Helvetica, Arial, sans-serif">>000000099178</</font></font><font
size="-1"><font face="Helvetica, Arial, sans-serif">subItem</font></font><font
size="-1"><font face="Helvetica, Arial, sans-serif">><br>
</item><br>
<Signature xmlns=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a>><br>
<SignedInfo><br>
<CanonicalizationMethod
Algorithm=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/TR/2001/REC-xml-c14n-20010315">"http://www.w3.org/TR/2001/REC-xml-c14n-20010315"</a> /><br>
<SignatureMethod
Algorithm=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#rsa-sha1">"http://www.w3.org/2000/09/xmldsig#rsa-sha1"</a> /><br>
<Reference URI=""><br>
<Transforms><br>
<Transform
Algorithm=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">"http://www.w3.org/2000/09/xmldsig#enveloped-signature"</a> /><br>
</Transforms><br>
<DigestMethod
Algorithm=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#sha1">"http://www.w3.org/2000/09/xmldsig#sha1"</a> /><br>
<DigestValue></DigestValue><br>
</Reference><br>
</SignedInfo><br>
<SignatureValue/><br>
<KeyInfo><br>
<KeyValue/><br>
</KeyInfo><br>
</Signature><br>
</getToken><br>
<br>
The value for <DigestValue> is calculated canonicalizating the
document, and it is easy to obtain. But this </font></font><font
size="-1"><font face="Helvetica, Arial, sans-serif"><DigestValue>
is not what is signed; it suffers some transformations, and then it is
signed. I would like to know what are these transformations, and the
final string that really gets signed in this example.<br>
<br>
Thanks a lot,<br>
Javier.<br>
<br>
<br>
</font></font>
<div class="moz-signature">-- <br>
<meta name="GENERATOR" content="Microsoft FrontPage 6.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<meta http-equiv="Content-Type" content="text/html; ">
<title>Javier Borrajo</title>
<div align="left"> <font face="Arial" size="2">Javier Borrajo</font></div>
<div align="left"> <i> <font face="Arial" size="2">Laudus SA</font></i></div>
<div align="left"> <i> <font face="Arial" size="2">Coyancura 2241, Of
83 - Providencia</font></i></div>
<div align="left"> <font face="Wingdings">(</font> <i> <font
face="Arial" size="2">469 2100</font></i></div>
<div align="left"> <font size="1"><font face="Arial" size="2"><font
face="Wingdings" size="3">*</font> </font><i><a
href="mailto:JBorrajo@Laudus.cl"><font face="Arial" size="2">
JBorrajo@Laudus.cl</font></a></i></font></div>
</div>
</body>
</html>