ACTIONSCRIPT 3 Developer’s Guide en

ACTIONSCRIPT 3.0 DEVELOPER’S GUIDE
XML signature validation in AIR
About XML signatures
Adobe AIR 1.5 and later
An XML signature is a digital signature represented in XML syntax. The data in an XML signature can be used to
validate that the signed information has not been altered since signing. In addition, when a signing certificate has been
issued by a trusted certification authority, the identity of the signer can be verified through the public key
infrastructure.
An XML signature can be applied to any type of digital data (in binary or XML format). XML signatures are typically
used for such purposes as:
checking whether external or downloaded resources have been modified
verifying that messages come from a known source
validating application license or subscription privileges
Supported XML signature syntax
Adobe AIR 1.5 and later
AIR supports the following elements from the W3C recommendation for XML Signature Syntax and Processing:
All core signature syntax elements (section 4 of the W3C recommendation document)—except the KeyInfo
element is not fully supported
The KeyInfo element must only contain an X509Data element
An X509Data element must only contain an X509Certificate element
The SHA256 digest method
The RSA-SHA1 (PKCS1) signing algorithm
The "Canonical XML without comments" canonicalization method and transform
The enveloped signature transform
timestamps
The following document illustrates a typical XML signature (most of the cryptographic data has been removed to
simplify the example):
Last updated 6/6/2012
860