ISSUE-84: What should the best practices say about defenses against collision generation?
What should the best practices say about defenses against collision generation?
- State:
- CLOSED
- Product:
- Raised by:
- Bradley Hill
- Opened on:
- 2009-01-13
- Description:
- Proposal: withComments shouldn't be used to canonicalize the SignedInfo
- Related Actions Items:
- No related actions
- Related emails:
- Draft minutes: xmlsec face-to-face 14 January 2009 (from tlr@w3.org on 2009-01-22)
- Draft Minutes: xmlsec face-to-face 13 January 2009 (from tlr@w3.org on 2009-01-22)
Related notes:
allowing C14N withComments for the SignedInfo may significantly increase the ability to generate XML signatures with colliding hashes. (as comments allow large amounts of arbitrary data to be inserted into signatures while still leaving them well-formed)
Not sure if this is relevant as XML signatures are inherently indirect, and the same risks may unavoidably apply for reference digests and be better addressed by other means, such as randomized hashing.
not relevant - impossible to avoid this threat with indirected signatures
Bradley Hill, 27 Jan 2009, 21:22:53Display change log
