XML Encryption 1.1 Interop Test Report (original) (raw)

Abstract

This document is the interop report for new features introduced in XML Encryption 1.1. It does not replicate interop testing performed for features retained from XML Encryption 1.0.

Status of This Document

This section describes the status of this document at the time of its publication. Other documents may supersede this document. A list of current W3C publications and the latest revision of this technical report can be found in the W3C technical reports index at http://www.w3.org/TR/.

This document was published by the XML Security Working Group as an Editor's Draft. If you wish to make comments regarding this document, please send them to public-xmlsec@w3.org (subscribe,archives). All feedback is welcome.

Publication as an Editor's Draft does not imply endorsement by the W3C Membership. This is a draft document and may be updated, replaced or obsoleted by other documents at any time. It is inappropriate to cite this document as other than work in progress.

This document was produced by a group operating under the 5 February 2004 W3C Patent Policy.W3C maintains a public list of any patent disclosures made in connection with the deliverables of the group; that page also includes instructions for disclosing a patent. An individual who has actual knowledge of a patent which the individual believes containsEssential Claim(s) must disclose the information in accordance with section 6 of the W3C Patent Policy.

Table of Contents

• 1. Introduction
• 2. Key Derivation
• 3. Key Agreement Algorithms
• 4. Block Encryption Algorithms: AES-GCM
• 5. SHA Algorithms
• 6. RSA-OAEP Key Transport
• 7. Canonicalization Algorithms (previously interop tested)
• A. References
  • A.1 Informative references

1. Introduction

This document summarizes interop tests and the test results for new features introduced in XML Encryption 1.1 [XMLENC-CORE1]. Changes to XML Encryption introduced in XML Encryption 1.1 are summarized in a detailed change explanation document [XMLENC-CORE1-CHGS].

Items that were required or optional features of XML Encryption 1.0 were tested as part of XML Encryption 1.0 interop and are not included in XML Encryption 1.1 testing, even if the status was changed from optional to required (or vice versa).

Tests that are marked 'Y' are completed, 'U' means 'untested' and should not be taken to make a statement about the implementation (as testing may simply not have been performed for interop due to timing or other reasons).

2. Key Derivation

• Add ConcatKDF algorithm (required algorithm)
• Add PBKDF2 algorithm (optional algorithm)
• Add XML DerivedKey element

In these tests the content is encrypted with a symmetric key that is derived from another symmetric key. The key to be derived from is specified in the "Symmetric key" column below.

Note - ReferenceList, DerivedKeyName and MasterKeyName schema items were not used in these tests. Use of DerivedKey withRetrievalMethod was also not tested.

3. Key Agreement Algorithms

• Add required Elliptic Curve Diffie-Hellman (Ephemeral-Static mode)
• Add_optional_ Diffie-Hellman Key Agreement (Ephemeral-Static mode) with explicit Key Derivation Functions

In these tests the

• At first the content is encrypted by a random symmetric key .
  The KeyInfo of the content's EncryptedData has EncryptedKey.
• Then this symmetric key is wrapped by a second symmetric key that is derived from the key agreement.
  The KeyInfo of first symmetric key's EncryptedKey has AgreementMethod.
• Key agreement is based on one sender's ephemeral key and receiver's static key.
  The OriginatorKeyInfo of AgreementMethod has a temporary generated key indicated by KeyValue.
  The RecipientKeyInfo of AgreementMethod has X509Data which is the receiver's public key.

4. Block Encryption Algorithms: AES-GCM

• Add AES-128-GCM Block Encryption Algorithm as required
• Add AES-256-GCM Block Encryption Algorithm as optional

The details about the encryption key are embedded in the <KeyInfo>

The tests in section 6. RSA-OAEP Key Transport were used to interop test these block encryption algorithms.

In addition, the following test was also used. In this test the content is encrypted by the specified symmetric key:

5. SHA Algorithms

• Add SHA-384 Message Digest as_optional_

This algorithm was tested as part of XML Signature 1.1 SHA interop testing [XMLDSIG-CORE1-INTEROP].

6. RSA-OAEP Key Transport

• Enabled RSA-OAEP Key Transport to be used with arbitrary mask generation functions (e.g. SHA2 based) by defining an additional RSA-OAEP URI and significantly revising specification text. Add definition of new xenc11:MGF element.

In these tests the

• At first the content is encrypted by a random symmetric key .
  The KeyInfo of the contents's EncryptedData has an EncryptedKey.
• Then this symmetric key is wrapped by an public key.
  The KeyInfo of this EncryptedKey has X509Data of the public key.

7. Canonicalization Algorithms (previously interop tested)

The following algorithms were added in XML Encryption 1.1 but were not included in this round of interop testing as they have been previously tested during the development of the corresponding W3C Recommendation:

• Add Canonical XML 1.1 (omit comments) as optional. Tested with development of [XML-C14N11].
• Add Canonical XML 1.1 with comments as optional. Tested with development of [XML-C14N11].

A. References

A.1 Informative references

[XML-C14N11]

John Boyer, Glenn Marcy. Canonical XML Version 1.1. 2 May 2008. W3C Recommendation. URL: http://www.w3.org/TR/2008/REC-xml-c14n11-20080502/

[XMLDSIG-CORE1-INTEROP]

Frederick Hirsch XML Signature 1.1 Interop Test Report. 23 July 2012. W3C Editors Draft. (Work in progress.) URL: http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core1-interop/Overview.src.html

[XMLENC-CORE1]

J. Reagle; D. Eastlake; F. Hirsch; T. Roessler. XML Encryption Syntax and Processing Version 1.1. 18 October 2012. W3C Last Call Working Draft. (Work in progress) URL: http://www.w3.org/TR/2012/WD-xmlenc-core1-20121018/

[XMLENC-CORE1-CHGS]

Frederick Hirsch. Functional Explanation of in XML Encryption 1.1. 18 October 2012. W3C Working Group Note. URL: http://www.w3.org/TR/2012/NOTE-xmlenc-core1-explain-20121018/