Hi Aleksey, In order to encrypt every "Salary" node in the document
xmlsec does not initialized the Encrypted node with the resulting cipher data Do you see a problem ? Do you have an example of CipherReference usage with xmlsec ? Thanks, Ed This is the template ... <EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#"> <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" /> <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <KeyName>epm-des</KeyName> </KeyInfo> <CipherData> <CipherReference URI="#Confidential"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116" xmlns="http://www.w3.org/2000/09/xmldsig#"> <XPath>ancestor-or-self::Salary</XPath> </Transform> </Transforms> </CipherReference> </CipherData> </EncryptedData> This is the document ... <Document> <PersonalData> <Name>Ed Shallow</Name> <StreetAddress>1234 Mockingbird Lane</StreetAddress> <City>Yellowknife</City> <PostalCode>W1C6J3</PostalCode> <SIN>123456789</SIN> <Salary>2,000,000,000,000</Salary> </PersonalData> <PersonalData> <Name>Gail Shallow</Name> <StreetAddress>1234 Mockingbird Lane</StreetAddress> <City>Yellowknife</City> <PostalCode>W1C6J3</PostalCode> <SIN>123456789</SIN> <Salary>1,000,000,000,000</Salary> </PersonalData> <Encrypted Id="Confidential"></Encrypted> </Document> _______________________________________________ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec