RE: Improve performance of XML Signing

[Murugan Selvaraj]

Yes I have you characterized the performance of the end-to-end
transaction
to determine where your bottle-necks are.The bottle-necks are signing
the URI of the XML document that takes 890 milliseconds (We are not
even signing whole XML document)using enveloped sign.I just developed
one sample XML file .It is taking 890 milliseconds to sign the URI.Can
you now tell me how to improve the performance.

I have attached the XML document and the code below.
XML:
<?xml version="1.0" encoding="UTF-8" ?> 
 <DigitalWorkFlowPacket Id="new"
xmlns:tools="http://www.digitalBrIdge.net/DWF/Tools/1.0";
xmlns:dwf="http://www.digitalBrIdge.net/DWF/1.0";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xmlns:j="http://www.it.ojp.gov/jxdm/3.0.2";
xmlns:mc="http://home.icjis.maricopa.gov/icjisschemas/MC/1.0";>
<Signatures>
      <Signature linkName="main">
        <Reference type="uri">
          main
        </Reference>
      </Signature>
</Signatures>
  
<div id="main">   
1 
</div> 

</DigitalWorkFlowPacket>

CODE : 

KeyStore ks = KeyStore.getInstance(KEYSTORETYPE);
                        FileInputStream fis = new
FileInputStream(KEYSTORE);              
                        ks.load(fis, KEYSTOREPASS.toCharArray());
                        PrivateKey privateKey =
(PrivateKey)ks.getKey(KEYALIAS,KEYSTOREPASS.toCharArray());
                        
                        XMLSignature xmlSig = new XMLSignature(doc,"",
XMLSignature.ALGO_ID_SIGNATURE_DSA);
                        org.w3c.dom.Element sigElement =
xmlSig.getElement();            
                        signAttachElement.appendChild(sigElement);

                        Transforms transforms = new Transforms(doc);
        
transforms.addTransform(Transforms.TRANSFORM_ENVELOPED_SIGNATURE);
        
transforms.addTransform(Transforms.TRANSFORM_C14N_WITH_COMMENTS);

                        xmlSig.addDocument(strURISign,transforms,
Constants.ALGO_ID_DIGEST_SHA1);
                        X509Certificate cert =
(X509Certificate)ks.getCertificate(CERTIFICATEALIAS);
                        if (cert == null)
                        {
                        throw new Exception("X509 certificate not
found");
                        }         
                xmlSig.addKeyInfo(cert);
                xmlSig.addKeyInfo(cert.getPublicKey());        
                //System.out.println("AFTER calling");
                xmlSig.sign(privateKey);

-----Original Message-----
From: Arshad Noor [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, March 22, 2006 5:34 PM
To: security-dev@xml.apache.org
Subject: Re: Improve performance of XML Signing

Have you characterized the performance of the end-to-end transaction
to determine where your bottle-necks are?  Without that you're shooting
in the dark - i.e. you could spend a lot of time optimizing components
of the process and still not a dent in the overall signing time.

Arshad Noor
StrongAuth, Inc.

Murugan Selvaraj wrote:
> Hi All,
> 
>  
> 
> We are trying to improve the performance of the XML signing done using

> apache tool kit.Can any one help and guide me on improving the 
> performance of the signing
> 
>  
> 
> Help would be appreciated!!!
> 
>  
> 
> Thanks
> 
> Murugan
> 
>  
> 
>  
> 
>  
>