Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to validate an XML message (with XML-DSig or XAdES signature) by a Data Validation and Certification Server (RFC 3029)? Should it understand XML signatures or not? Could it parse XML? Or message must be in a specific format to be validated by DVCS?

According to RFC 3029:

DVCSRequest ::= SEQUENCE  {
    requestInformation         DVCSRequestInformation,
    data                       Data,
    transactionIdentifier      GeneralName OPTIONAL
Data ::= CHOICE {
      message           OCTET STRING ,
      messageImprint    DigestInfo,
      certs             SEQUENCE SIZE (1..MAX) OF

The requester fills the 'data' element as follows:

  • For a vsd service request, the requestor encapsulates a CMS SignedData object in the value octets of the 'message' choice. It is up to the requester to decide whether and how to provide any certificate that may be needed to verify the signature(s) in the signedData object. A requester MAY add certificates to the encapsulated signedData object or in the certificate list of the request.

Does it mean that DVCS doesn't support XML-DSig? Message must be in a CMS SignedData format?

share|improve this question

An RFC 3029 compliant server must process CMS SignedData format messages, not any sort of XML messages.

That being said, converting between ASN.1 and XML is a common use case. A modern implementation would/should probably accept various types of input messages, not just CMS SignedData.

I believe that it's also important to note that RFC 3029 is of type 'experimental' and is now 12 years old.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.