[Cites 0, Cited by 0]
[Entire Act]
Union of India - Section
Section 11 in The Digital Signature (End entity) Rules, 2015
11. The xml digital signature standards.
- The most important standards that shall be applicable for different activities associated with xml digital signature functions are as under-| The Product | Standard |
| RFC 3275 with the following constraint | |
| o Manifest is not permitted inside Object, | |
| o Key info containing X509 Certificate element is mandatory. | |
| o The Reference Processing shall use the ExclusiveCanonicalization (without comments) in addition to othertransforms. | |
| XML Digital Signature Standard | o For XML resource, XSLT shall be the last transform done toenable the rendering of the document on screen. |
| o For rendering of document on the screen | |
| o Each referenced XML resource shall be implemented usingXSLT. | |
| o Each non XML resource shall be implemented using Mime Typeattribute mentioned in the object. | |
| XML Namespace | RFC 3986 |
| Signature encoding | UTF-8 RFC 3629 |
| Signature Value Encoding | Base64 RFC 4648 |
| Reference element Digest | SHA256 FIPS 180-4 |
| Signature Algorithm | SHA256 with RSA PKCS-1 Version 1.5 |
| o Exclusive (without comments), XML-EXC-C14N, RFC 3741 | |
| o Canonical XML | |
| Signature block Canonicalization | 1. Canonical XML 1.0 (omits comments) |
| http://www.w3.org/TR/2001/REC-xml-c14n-20010315 | |
| 2. Canonical XML 1.1 (omits comments) | |
| http://www.w3.org/2006/12/xml-c14n11 | |
| Exclusive (without comments), XML-EXC-C14N, RFC 3741 | |
| Canonical XML | |
| 1. Canonical XML 1.0 (omits comments) | |
| http://www.w3.org/TR/2001/REC-xml-c14n-20010315 | |
| Transform Algorithms | 2. Canonical XML 1.1 (omits comments) |
| http://www.w3.org/2006/12/xml-c14n11 | |
| XSLT-XSL Transforms (XSLT) Version 1.0. W3C | |
| http://www.w3.org/TR/1999/REC-xslt-19991116 | |
| XPath – RFC 3653 | |
| Signature Type | enveloped or enveloping or detached |
| Digital Signature Certificate | (DER) X.509 V3 issued as per interoperability guidelines |
| Public Key Algorithms | RSA PKCS-1 Version 1.5 |
| ECC curve | NIST P-256, P-384, or P-521 |
| Long Term Signature formats | 1. XMLERS RFC 6283 and XAdES |
| 2. XMLERS RFC 6283 and PAdES with XAdES | |
| Time Stamp Token | As specified RFC 3161 in XML notation |