I have been working with signed XML in .NET framework 1.1 using the
SignedXml class.
Now I also have to handle signed and encrypted XML, but does framework 1.1
support encrypted XML at all?
I can see .NET 2.0 does, but I have my doubts about 1.1.

Thanks,
Kim

I am assuming the SignedXml class is already coming from WSE - IIRC the encryption
equivalent is called EncryptedData...


-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

On Mar 12, 12:52 pm, "Kim H" <some... (AT) nowhere (DOT) com> wrote:
you can always encrypt it yourself. Remember however that if you are
using sign then encrypt order of operations, then you have to
serialize xml in explicit cannonical form first, calcuate hash of
cannonical xml data, and then encrypt it with CBC mode and random IV
prepended to the text. After that you put result in xmlenc element and
you are done. All could be done in about 100 lines of code.

-Valery.
http://www.harper.no/valery

On Mar 12, 12:52 pm, "Kim H" <some... (AT) nowhere (DOT) com> wrote:
And btw - my advise for you is to use WSE. It gives you signed and
ecrypted xml almost for free.

-Valery.
http://www.harper.no/valery

On Mar 13, 8:17 pm, Dominick Baier
<dbaier (AT) pleasepleasenospam_leastprivilege (DOT) com> wrote:
SignedXml class is comming originally from WSE, even so it was made as
part of framework from v2.0.


-Valery.
http://www.harper.no/valery