The status/design of XML Signatures and Encryption

Works with enveloped signatures (signature within content being signed), enveloping signatures (content is within signature being signed) and detached signatures (over data external to the signature document).
Uses XML Schema (and DTD) to describe content model.

Meets requirement of signing portions of documents via Transforms: processing the document before signing (e.g., C14N, XPath, etc.)

<Reference URI="order.xml">
  <Transforms>
    <Transform Algorithm="user-template.xslt"/>
    <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
  <Transforms>
  <DigestMethod Algorithm="..."/>
  <DigestValue>a234cb</DigestValue>
</Reference>

dsig:Features