Section 9(3) in The Digital Signature (End entity) Rules, 2015
(3)For the purpose xml digital signature generation, the signing software shall-(a)create signed info element with signature method, canonicalisation method and reference(s);(b)apply canonicalisation to signed info and calculate the hash value of canonicalised signed info using the hashing algorithms implied by the signature method;(c)ensure that,-(i)the signatory has seen all the contents of the document before signing;(ii)the contents display requirements, in the case of automated signing process, is not required;(iii)to sign multiple resources together,-(a)each resource shall be rendered on the screen;(b)each referenced xml resource shall be rendered using xslt and the xslt shall be the last transform done to render the resource on the screen;(c)each non xml resource shall be rendered using mime-type attribute mentioned in the object;(d)generate the signature using the signature algorithm and the hash, the signatory's private key, and the public key parameters (if applicable) and perform base64 encoding of the signature result and use it to form signature value;(e)construct the signature element that includes signed info, items of information, key info with x 509 certificate element and signature value and the x509 certificate element shall carry the signatory's x 509 public key certificate.
