[Mono-devel-list] C14N transforms implementation in System.Security.Cryptography.Xml

[Sebastien Pouliot]

Aleksey,

> I would like to propose a patch that provides XML Canonicalization
> transforms implementation for System.Security.Cryptography.Xml

Great! That's the BIG missing piece in S.S.C.X.

> The patch (see attached file) includes C14N implementation that later
> could be extended to support Exclusive C14N as well.

Even greater to support WSE!

> Also there are about a dozen new test cases from C14N spec.

Still better - I'm curious to see how it will do in .NET (AFAIK MS still has
some C14N issues).

> The code more or less mirros the C code I wrote for LibXML2
> (http://xmlsoft.org) and xmlsec (http://www.aleksey.com/xmlsec) libraries.

I had the chance, a few months back, to get a look at xmlsec and that's
pretty good stuff you did!
Seems that we're lucky that you're interested in C# :-)

> I would appreciate if someone can take a look at this patch, review it and
> commit to CVS. Also it would be great if someone can run the new tests
> on Windows (I don't have MS .NET myself).

I'll do both and also maybe Atsushi can review the XML parts (to take a
break from XSLT). However this may take some time as I won't be home for a
few days (if it can stop raining...).

> I have tried to contact Sebastien Pouliot (who seems to be the
> maintainer for this module) but he did not respond.

Sorry I'm on vacations right now :-) so I read my office's email too often
(not more than once a day ;-).

> Also I would be interested in helping with implementation of XML and
> XML Security stuff in Mono. It seems that there are a lot of things to do
> (for example, I had little success with using XML entities or running
> some xpath expressions). I wonder if there is someone else working
> on this stuff.

Great news! Get in touch with Atsushi for the XML parts and myself for the
security parts (use my home address for quicker responses). We're both often
on IRC (#mono at irc.gnome.org) but at different times (Japan and Canada).

System.Security.Cryptography.Xml is almost complete except for (most of) the
Transform classes - see http://www.go-mono.com/crypto.html for more details.
As you can see I far more inclined to crypto than XML ;-).

There is also an incomplete implementation of MS Web Service Enhancement
(WSE) but it's not yet commited into CVS due to some licensing issues in
WS-Security (Miguel is looking into this...).


Welcome to Mono !

Sebastien Pouliot
Security Architect, Motus Technologies, http://www.motus.com/
work: spouliot at motus.com
home: spouliot at videotron.ca