c# - How do I decide the `DigestValue`, `SignatureValue` and `RSAKeyValue` for digital signing of XML -


i working on project need verify xml digitally signed or not. getting hard me try , validate xml key values following

    <signature xmlns="http://www.w3.org/2000/09/xmldsig#">     <signedinfo>       <canonicalizationmethod algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />       <signaturemethod algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />       <reference uri=**some uri value**>         <transforms>           <transform algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />           <transform algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">            </transform>         </transforms>         <digestmethod algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />         <digestvalue>**some digest value**</digestvalue>       </reference>     </signedinfo>     <signaturevalue>**some signature value**</signaturevalue>   <keyinfo xmlns:type="http://www.w3.org/2000/09/xmldsig#rsakeyvalue">       <rsakeyvalue><modulus>**some rsa key value**</modulus>        <exponent>aqab</exponent>     </rsakeyvalue>    </keyinfo >   </signature>

i not able trace out how can values

  1. reference uri
  2. digest value
  3. signature value
  4. rsa modulus value

can 1 tell me how can values of above? , logic behind using these combinations in xml validation?

i using c# checking validations. can check code c# in previous questions

  1. how validate xml following code

thanks in advance.

if want check if values there, use xml manipulation class xdocument.

if want verify signature need understand this:

  1. the issuer generates hash of document puts on (this digestvalue)
  2. the issuer encrypt hash private key , puts on document (this signaturevalue)
  3. the user sends certificate document (this x509certificate field).

so want check if signature valid, need decript signaturevalue public key , compare digestvalue. if both equal, document ok, if not, maybe 2 things ocurred. or document modified during process, or public key not correspondent private key encrypts document.


-

Comments

Post a Comment

Popular posts from this blog

What Are The Best Universities In The World?

Harvard and Yale are often referred to as “the best of the best”. But when it comes to the highest ranked universities, these and other Ivy League schools don't even make it into the top five. So what are the world's best universities? Well, according to an index by the Times Higher Education, Stanford ranks 3rd in the world. Most people associate Stanford with tech-capital Silicon Valley, which is where the school is located. And in fact, it's largely because of Stanford that the region is now the global capital of entrepreneurship and technology. In the 1940's and 50's the university heavily encouraged students and faculty to start their own companies, eventually leading to companies like Google and Snapchat. And still today, the school is known to produce some of the most successful entrepreneurs. A Stanford degree is in extremely high demand, and the school maintains the lowest acceptance rate in the country, admitting less than 5 percent of applicants. Much ...
Read more

Hard vs. Soft Water: What's The Difference?

Hard or Soft? HOW AM I SUPPOSED TO KNOW? THEY BOTH LOOK EXACTLY THE SAME! Hey there, Sapna here for Dnews. From the outside, all water is seemingly the same: clear, mostly flavorless, two hydrogens, one oxygen. But once you get past the basics, water is actually pretty versatile. It can be distilled, filtered, tap, bottled, and if you're real fancy, there's water marketed as kosher, organic or kabbalah. But did you know water can also be hard or soft? No, this isn't to describe how the water actually feels. It actually has to do with its mineral content. Water becomes ‘hard' when it has a higher than normal concentration of minerals, primarily calcium and magnesium. Water picks up these minerals from rocks and soil as it flows through rivers, wells or other waterways. Soft water, on the other hand, has a low mineral content, either because it has not yet flowed through rocks or wells - like rain water - or because the rocks it has come in contact with have little to no...
Read more

Why People Get Naked Before Freezing To Death

Getting naked is usually great .. But not this time What's up guys I'm Sapna here for DNews. In the movie Everest that came out in 2015.. kind of a spoiler alert but not really and the movie is based on a true story... but anyway… so towards the end of the movie .. one of the guys who was stuck at the top of Mount Everest overnight in the bitter cold starts to rip off his coat and outer layers. That might seem super weird but it's actually a documented phenomenon unofficially called paradoxical undressing. The reason it's called “paradoxical undressing” is because stripping down while you're freezing to death is the exact opposite of what we should instinctively do to protect ourselves from the cold! But it happens to some people during extreme stages of hypothermia. Hypothermia is when the body temperature dips to dangerously low levels-- below 95 degrees Fahrenheit A study by German researchers in the International Journal of Legal Medicine looked at 69 cases o...
Read more