Hi,
I'm a new bee to xml security world.
Requirement:
I need to write a library to encrypt/sign xml. i.e. Something similar to
xmlsec.
But my library is not based on DOM. It has another parsing mechanism.
Crypto library:
I 'm going to use openssl for this.
Question:
If I need to support Triple-DES as the initial
step(http://www.w3.org/2001/04/xmlenc#tripledes-cbc), is there a
straight forward way in Openssl?
I found that openssl has cipher "EVP_des_ede3_cbc()".
If I send this cipher to EVP_CipherInit_ex() method and get the result
using EVP_CipherUpdate() and EVP_CipherFinal_ex) calls, does that mean
the resulting buffer has encrypted data?
Or Do I have to send the resulted data three times(3 calls to Update) to
comply with http://www.w3.org/2001/04/xmlenc#tripledes-cbc? (before
encode and attach to the xml doc)
Please rectify me if Im wrong :)
Thanks,
Kaushalye
_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec
