Ivan,
1. Your IAIK sample uses an XPath-Filter that according to my read should be the same as an enveloping transforms - but for some reason the xsec library is not outputting attributes when canonicalising. This looks like a bug in the library, and would explain why the IAIK sample does not validate.
There *was* a bug in the library. There was a case where attribute nodes would get dropped from the input nodeset that is passed to the xpath-filter transform. I've checked a fix into CVS and the CVS code now validates the IAIK sample as OK.
Cheers,
Berin