[xmlsec] Sensitive Data Encryption

Thomas Jones securebuddha at gmail.com
Wed Mar 29 15:30:06 PST 2006


What option and/or argument sequence is needed by xmlsec1 to encrypt a
particular element's content and children?

The original sources are:
...
<DocumentInfo classification="proprietary">
        <ClientId>00001</ClientId>
        <SecurityManagement>
            <ChangeControl>
                <RevisionId>$Id$</RevisionId>
                <Author>trjones</Author>
                <Reviewer>trjones</Reviewer>
            </ChangeControl>
            <AccessControl>
                    <User uid="0">rw-</User>
                    <Group gid="0">r--</Group>
                    <Other>r--</Other>
                    <NamedUser uid="1000">rw-</NamedUser>
            </AccessControl>
        </SecurityManagement>
    </DocumentInfo>
...

And I would like to do the following:
...
<DocumentInfo classification="proprietary">
        <ClientId>00001</ClientId>
        <SecurityManagement>
            <ChangeControl>
                <RevisionId>$Id$</RevisionId>
                <Author>trjones</Author>
                <Reviewer>trjones</Reviewer>
            </ChangeControl>
            <AccessControl>
                <EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#">
                    <EncryptionMethod                
Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
                    <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
	                <KeyName/>
                    </KeyInfo>
                    <CipherData>
	                <CipherValue></CipherValue>
                    </CipherData>
                </EncryptedData>
            </AccessControl>
        </SecurityManagement>
    </DocumentInfo>
...

Is this possible with this application?

Thanks.
SB


More information about the xmlsec mailing list