XML Digital Signature Tool 0.0.2.20070320

XML Digital Signature Tool is a Firefox extension that can process Digital Signature in XML documents (as per W3C standard for XML signature: http://www.w3.org/Signature/).

The XML digital signature tool is built on top of Apache XML security C library (version 1.3), called XSEC (http://xml.apache.org/security/c/index.html). We made no changes to XSEC source code. We just compiled the source with NSS option to provide cryptographic functionality using browsers CERT DB. The recompiled XSEC library is packaged with the XPI file for this extension.

In addition, this tool provides an XPCOM based API for wrapping C++ based Apache XML security library. Our XPCOM IDL based API allows any Firefox based extension to access XSEC library using JavaScript and C++. This tool also provides XUL based GUI for specifying various parameters for signing XML files and verifying signed XML files.

The Apache XSEC c-library uses the Apache XML projects (http://xml.apache.org/) Xerces-C XML Parser and Xalan-C XSLT processor. The latter is used for processing XPath and XSLT transforms. This tool does not include the DLL or shared library for Xercrs-C or Xalan-C. You have to download and install Apache XERCES for C (v1.3.0) and XALAN tools for C (v.1.10) before you can run this extension. The path for shared libraries or DLL of XERCES and XALAN must be in the LD_LIBRARY_PATH (for Unix) or PATH (for windows).

In addition, the tool provides following features:

- ability to generate Self-Issued SAML Token (both v1.1 and v2.0) using the RSA/DSA keys in the certificate DB. (http://docs.oasis-open.org/security/saml/v2.0/) The SAML Token generation is implemented using a XPCOM based componenet.
- XPCOM based API for UUID generation. The XPCOM implementation resues the UUID generation source code in the RFC4122 (http://www.ietf.org/rfc/rfc4122.txt). We have adpated the source code for Mozilla NSS based digest and added string based UUID API.

Note: This tool only works on Windows and Linux OSes.