The status/design of XML Signatures and Encryption, Key Management

Works with enveloped signatures (signature within content being signed), enveloping signatures (content is within signature being signed) and detached signatures (over data external to the signature document).

Meets requirement of signing portions of documents via Transforms: processing the document before signing (e.g., C14N, XPath, etc.)

<Reference URI="order.xml">
  <Transforms>
    <Transform Algorithm="user-template.xslt"/>
    <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
  <Transforms>
  <DigestMethod Algorithm="..."/>
  <DigestValue>a234cb</DigestValue>
</Reference>

dsig:Features*