Hi Aleksey,
  
   In order to encrypt every "Salary" node in the document

   xmlsec does not initialized the Encrypted node with the resulting cipher
data

   Do you see a problem ?

   Do you have an example of CipherReference usage with xmlsec ?

Thanks,
Ed

This is the template ...
 
  <EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#";>
    <EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"; />
    <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#";>
      <KeyName>epm-des</KeyName>
    </KeyInfo>
    <CipherData>
      <CipherReference URI="#Confidential">
        <Transforms>
          <Transform
Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116";
xmlns="http://www.w3.org/2000/09/xmldsig#";>
            <XPath>ancestor-or-self::Salary</XPath>
          </Transform>
        </Transforms>
      </CipherReference>
    </CipherData>
  </EncryptedData>


 
This is the document ...

<Document>
  <PersonalData>
    <Name>Ed Shallow</Name>
    <StreetAddress>1234 Mockingbird Lane</StreetAddress>
    <City>Yellowknife</City>
    <PostalCode>W1C6J3</PostalCode>
    <SIN>123456789</SIN>
    <Salary>2,000,000,000,000</Salary>
  </PersonalData>
  <PersonalData>
    <Name>Gail Shallow</Name>
    <StreetAddress>1234 Mockingbird Lane</StreetAddress>
    <City>Yellowknife</City>
    <PostalCode>W1C6J3</PostalCode>
    <SIN>123456789</SIN>
    <Salary>1,000,000,000,000</Salary>
  </PersonalData>
  <Encrypted Id="Confidential"></Encrypted>
</Document>


_______________________________________________
xmlsec mailing list
xmlsec@aleksey.com
http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to