[dev-crypto-csharp] Verify a signature xml with bouncy castle c#

[Jean-Paul Berthelot]

Hi all,

I have the following Signature xml token being passed into my system.

How can I verify the XML signature for the below in Bouncy Castle?

<!== Begin signature info ==!>

      <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; Id="SIG-24">
        <ds:SignedInfo>
          <ds:CanonicalizationMethod 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";>
            <ec:InclusiveNamespaces 
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; 
PrefixList="soapenv"></ec:InclusiveNamespaces>
          </ds:CanonicalizationMethod>
          <ds:SignatureMethod 
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1";></ds:SignatureMethod>
          <ds:Reference URI="#Id-386361643">
            <ds:Transforms>
              <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";>
                <ec:InclusiveNamespaces 
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; 
PrefixList=""></ec:InclusiveNamespaces>
              </ds:Transform>
            </ds:Transforms>
            <ds:DigestMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256";></ds:DigestMethod>
            
<ds:DigestValue>7+Mfi76lQi1PaIRx4ZsJhiNhdZcL77qCLIn63ptUSmk=</ds:DigestValue>
          </ds:Reference>
          <ds:Reference URI="cid:part006a655f0000013f518b8abf0000223c">
            <ds:Transforms>
              <ds:Transform 
Algorithm="http://docs.oasis-open.org/wss/oasis-wss-SwAProfile-1.1#Attachment-Content-Signature-Transform";></ds:Transform>
            </ds:Transforms>
            <ds:DigestMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256";></ds:DigestMethod>
            
<ds:DigestValue>CGbzdJi5exu3Ntsbi6jKUbYhZPMMZWpXVFOKySmme6k=</ds:DigestValue>
          </ds:Reference>
          <ds:Reference URI="#id-23">
            <ds:Transforms>
              <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";>
                <ec:InclusiveNamespaces 
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; 
PrefixList=""></ec:InclusiveNamespaces>
              </ds:Transform>
            </ds:Transforms>
            <ds:DigestMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256";></ds:DigestMethod>
            
<ds:DigestValue>gsv0sX4jfWWh+mXgb1DS1Gtg+oZqoLUU1Uup61gOM1I=</ds:DigestValue>
          </ds:Reference>
          <ds:Reference URI="#UsernameToken-22">
            <ds:Transforms>
              <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";>
                <ec:InclusiveNamespaces 
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"; 
PrefixList="soapenv"></ec:InclusiveNamespaces>
              </ds:Transform>
            </ds:Transforms>
            <ds:DigestMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256";></ds:DigestMethod>
            
<ds:DigestValue>PvM3b6kRb1t85Ea+BrMgi1E+rGR9RRoXWQ0Ysowf7fM=</ds:DigestValue>
          </ds:Reference>
        </ds:SignedInfo>
        
<ds:SignatureValue>Onws8qip3jVij7Tj1lNyCd83Cz+9tthnIHU8U3szzzeSucFSJuzImi3q4taqvp8wpTS6ArVVqmEOiUQhJx8zx+RL9amd1fgLN1UX914pylRWIPgnb0xCN6Yvg27dJPgxhZ8W4zxnfIHH71sB7cAW2G1X/wquf1qVhg0XNKJBHJgGEKvW8PpIJ3v3FBD6qcp9nRmW8KW+XddI0OB3qbI7YvUkRA5KzEct2vB92n4V3sfoW31PfOUZT1UfgjtpJbRUHF/EXb0Q41TN1NOxRlD3FEuOLm5vSKtcSh/fc0D6r1lVRUROmzvZZ0NuoluxF3egruXYz2lwSJ3+Q3UDm7QL1A==</ds:SignatureValue>
        <ds:KeyInfo Id="KI-A50E2B1CF4D9835966137146266695826">
          <wsse:SecurityTokenReference 
wsu:Id="STR-A50E2B1CF4D9835966137146266695827">
            <wsse:Reference URI="#X509-A50E2B1CF4D9835966137146266695825" 
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3";></wsse:Reference>
          </wsse:SecurityTokenReference>
        </ds:KeyInfo>
      </ds:Signature>

<!== End signature info ==!>

Kind regards,

Jean-Paul