ACTIONSCRIPT 3 Developer’s Guide en

Chapter 48: XML signature validation in
AIR
Adobe AIR 1.5 and later
Use the classes in the Adobe® AIR® XMLSignatureValidator API to validate digital signatures conforming to a subset
of the W3C recommendation for XML-Signature Syntax and Processing (http://http://www.w3.org/TR/xmldsigcore/).
XML signatures can be used to help verify the integrity and signer identity of data or information.
XML signatures can be used to validate messages or resources downloaded by your application. For example, if your
application provides services on a subscription basis, you could encapsulate the subscription terms in a signed XML
document. If someone attempted to alter the subscription document, validation would fail.
You could also use an XML signature to help validate downloaded resources used by your application by including a
signed manifest containing digests of those resources. Your application could verify that the resources have not been
altered by comparing the digest in the signed file with a digest computed from the loaded bytes. This is particularly
valuable when the downloaded resource is a SWF file or other active content that you want to run in the application
security sandbox.
Basics of XML signature validation
Adobe AIR 1.5 and later
For a quick explanation and code examples of validating XML signatures, see the following quick start articles on the
Adobe Developer Connection:
Creating and validating XML signatures (Flex)
Creating and validating XML signatures (Flash)
Adobe® AIR® provides the XMLSignatureValidator class and IURIDereferencer interface for validating XML
signatures. The XML syntax accepted by the XMLSignatureValidator class is a subset of the W3C recommendation for
XML Signature Syntax and Processing. (Because only a subset of the recommendation is supported, not all legal
signatures can be validated.) AIR does not provide an API for creating XML signatures.
XML signature validation classes
Adobe AIR 1.5 and later
The XML signature validation API includes the following classes:
Last updated 6/6/2012
855