Subject: I-D Action: draft-enhanced-xml-digital-signature-algorithm-01.txt

From: [email-masked]
Date: Mon, 04 Feb 2019 04:47:25 -0800

A New Internet-Draft is available from the on-line Internet-Drafts directories.

        Title           : Enhanced XML Digital Signature Algorithm to Mitigate  Wrapping Attacks
        Authors         : Jitendra Kumar
                          Balaji Rajendran
                          Bindhumadhava BS
	Filename        : draft-enhanced-xml-digital-signature-algorithm-01.txt
	Pages           : 11
	Date            : 2019-02-04

Abstract:
   XML signature standard [RFC3275]identifies signed elements by their
   unique identities in the XML document.  However this allows shifting
   of XML elements from one location to another within the same XML
   document, without affecting the ability to verify the signature.
   This flexibility paves the way for an attacker to tweak the original
   XML message without getting noticed by the receiver, leading to XML
   Signature wrapping or rewriting attacks.  This document proposes to
   use absolute XPath as a "Positional Token" and modifies the existing
   XML Digital Signature algorithm to overcome this attack.

The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-enhanced-xml-digital-signature-algorithm/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-enhanced-xml-digital-signature-algorithm-01
https://datatracker.ietf.org/doc/html/draft-enhanced-xml-digital-signature-algorithm-01

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-enhanced-xml-digital-signature-algorithm-01

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/