Sorry, one more idea... If you have all nodes together under
the same parent:

<SomeNode>
  <NodeToEncrypt>
    ...
  </NodeToEncrypt>
  <NodeToEncrypt>
    ...
  </NodeToEncrypt>
  ...
</SomeNode>

Then you can encrypt the content of the <SomeNode> element
using "content" type encryption:

http://www.w3.org/TR/xmlenc-core/#sec-eg-Element-Content

<SomeNode>
  <EncryptedData xmlns='http://www.w3.org/2001/04/xmlenc#'
                 Type='http://www.w3.org/2001/04/xmlenc#Content'>
     ...
  </EncryptedData>
</SomeNode>

However, this works only if you want to encrypt the whole
content of the node <SomeNode>.

Aleksey

Aleksey Sanin wrote:
Yes, I think this is the only way.

Aleksey

Ed Shallow wrote:
Yes that is right.

Do I have to encrypt each target node (all have same name) by doing
repeated individual calls on each successive node ?

Thanks,
Ed
-----Original Message-----
From: Aleksey Sanin [mailto:[EMAIL PROTECTED] Sent: Monday, July 02, 2007 4:32 PM
To: Ed Shallow; [email protected]
Subject: Re: [xmlsec] CipherReference

Oh, I see... Sorry, I don't think XMLEnc spec supports this. I believe
CipherReference lets you to get the encrypted data and put them in place
of the EncryptedData. And I believe you ask about "other way around".

Aleksey


Ed Shallow wrote:
Hi Aleksey,

I had a look at the test sub-directory. I guess I don't understand the

use of CipherReference then ...

What I need to do is select for encryption, "all" nodes with a particular name. For example <Salary>1,000,000</Salary> and replaced them "each" with their own <EncryptedData> element.

Is this done with an Xpath expression and CipherReference ?

Can I use a document and a template for this ?

Thanks,
Ed

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aleksey Sanin
Sent: Sunday, July 01, 2007 8:44 PM
To: [EMAIL PROTECTED]
Cc: [email protected]
Subject: Re: [xmlsec] CipherReference

   Do you have an example of CipherReference usage with xmlsec ?
Yes :) Search for CipherReference in the xmlsec folder. For example, tests\merlin-xmlenc-five\encrypt-element-aes192-cbc-ref uses it.

Aleksey
_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec
_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to