The XMLSecurity Provider component is used for Signing, encrypting data, based on a key (that is entered by the user) and an algorithm specifically designed for XML.This component can also handle digest data.

If the message is signed/digested by the sender, the recipient can verify if the message is from the correct sender and if the message did not change during transmission.

Configuration and Testing

Interaction Configuration

The component has the following attributes which can be configured from its Configuration Property sheet. The figure below illustrates the panel with Expert Properties enabled.

Mode: The six modes available for the user to select are listed below:

    ENCRYPT: if user needs to encrypt the data without signing.

    DECRYPT: If user needs to decrypt the data without verifying.

    SIGN: If user wants to SIGN

    VERIFY: If user wants to verify if the xml is tampered by any means.

    SIGN_ENCRYPT: Encryption and Signing are done together.

    DECRYPT_VERIFY: Decryption and Verfication are done together.

Encryption Algorithm: Specify the algorithm for encryption of selected element.

Signing Algorithm: Specify the algorithm for Signing.

Host Private Key Password: Password of the private key.

Host Store Password: Password of the Keystore

Host KeyStore Alias :The name given to the keypair containing the private key

Host KeyStore: Path to the Hosts keystore.

Partner certificate: Path of the certificate(public key) of the partner.

Encryption KeyLength: Specify length of the encryption key to be generated.

Encryption Key Algorithm: Algorithm to generate the intermediate  key for encryption.

Key Transportation Algorithm: The Key Transport Algorithm is a one-pass (store-and-forward) mechanism for transporting keying data to a recipient using the recipient's public key

Input Schema: Load the input schema for operation.

Output Schema: Load the Required output schema.

Elements to Encrypt/Decrypt: Select the elements to encrypt and decrypt.

Functional Demonstration

Scenario 1

Configure the XMLSecvurityProvider's as described in Configuration and Testing section and use feeder and display component to send sample input and check the response's respectively in two displays.

Title is chosen as the element for encryption in the following scenario.

 

Sample Input

Sample Output

The first display shows the Sign-Encrypted message. Please note that the same element (in this case, the element Title) is selected for signing (Hashing) and encryption, while the Second display shows the final output where the encrypted element Title is decrypted and verified.