<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>Murata-san<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>It is obviously preferable if we only have to reference the latest version of XML DSig. From a cursory glance at the specifications, the following paragraph appears to summarise the changes in XML DSig 1.1 that affect conformance:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>“</span>Conformance-affecting changes of XML Signature 1.1 against [the] previous recommendation mainly affect the set of mandatory to implement cryptographic algorithms, including Elliptic Curve DSA (and mark-up for corresponding key material), and additional hash algorithms. A detailed explanation of changes since the last Recommendation are available [<cite><a href="https://www.w3.org/TR/2013/REC-xmldsig-core1-20130411/#bib-XMLDSIG-CORE1-CHGS">XMLDSIG-CORE1-CHGS</a></cite>]. Changes are also described in a <a href="https://www.w3.org/TR/2013/REC-xmldsig-core1-20130411/Overview_diff_rec.html">diff document showing changes since the Second Edition</a>, as well as a <a href="https://www.w3.org/TR/2013/REC-xmldsig-core1-20130411/Overview_diff.html">diff document showing changes since the previous PR draft</a>.<span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>”<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>Since this is not my area of expertise, I’m not sure whether we have already adequately reviewed the changes in XML DSig 1.1. Does this need more discussion in Prague? I guess that we need the Ecma team to confirm that they agree that referencing XML DSig 1.1 and not the previous edition won’t break existing implementations.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>Kind regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'>Francis<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> eb2mmrt@gmail.com [mailto:eb2mmrt@gmail.com] <b>On Behalf Of </b>MURATA Makoto<br><b>Sent:</b> 02 June 2016 08:31<br><b>To:</b> Francis Cave <francis@franciscave.com><br><b>Cc:</b> SC34 <e-SC34-WG4@ecma-international.org><br><b>Subject:</b> Re: XAdES Support and the Revised OPC [formerly "DR 11-0030: Proposal"]<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Francis,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>XML DSig 1.1 discourages or deprecates some features of DSig 1.0. <o:p></o:p></p></div><div><p class=MsoNormal>However, in my understanding, any digital signature conformant to <o:p></o:p></p></div><div><p class=MsoNormal>DSig 1.0 is also conformant to DSig 1.1. I said so to Tracie in Barcelona.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I thus think that a normative ref to DSig 1.1 is good enough for <o:p></o:p></p></div><div><p class=MsoNormal>"allow for both DigSig 1.0 and 1.1 in the text". If we normatively <o:p></o:p></p></div><div><p class=MsoNormal>reference DSig 1.0, we will recommend SHA-1. I think that <o:p></o:p></p></div><div><p class=MsoNormal>we shouldn't.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Regards,<o:p></o:p></p></div><div><p class=MsoNormal>Makoto<o:p></o:p></p></div></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>2016-05-05 20:45 GMT+09:00 Francis Cave <<a href="mailto:francis@franciscave.com" target="_blank">francis@franciscave.com</a>>:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>My recollection accords with the meeting minutes. As I understand it, there is a consensus that we normatively need to allow for both versions of DSig, so that existing implementations (such as MSOFFCRYPTO) are still conformant, but we can also recommend use of the XAdES EN in an informative annex. I presume that what Murata-san means is that we are committed to introduce text into the OPC revisions that is in line with that consensus.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Francis</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> </span><o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> Rex Jaeschke [mailto:</span><a href="mailto:rex@RexJaeschke.com" target="_blank"><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>rex@RexJaeschke.com</span></a><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>] <br><b>Sent:</b> 04 May 2016 20:03<br><b>To:</b> 'SC34' <</span><a href="mailto:e-SC34-WG4@ecma-international.org" target="_blank"><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>e-SC34-WG4@ecma-international.org</span></a><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>><br><b>Subject:</b> XAdES Support and the Revised OPC [formerly "DR 11-0030: Proposal"]</span><o:p></o:p></p></div></div><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Hi there Murata-san, </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Below, you wrote, “We are committed to the introduction of XAdES EN into the OPC revision.”</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>I’m asking for clarification of this statement, so it is not misunderstood. At a glance, it seems to be making a broader claim that I thought WG4 had agreed to.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>From the Barcelona meeting minutes: “On Tuesday, in WG4 discussions: There was consensus that we should produce an informative annex describing a profile for XAdES appropriate for use with OPC, and allow for both DigSig 1.0 and 1.1 in the text.”</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>When this was agreed to, it was my understanding that there would *<b>not</b>* be any mandatory normative text re XAdES in the new OPC spec. Instead, the informative profile would give directions as to how an implementation could support XAdES, if it chose to do so. Specifically, a conforming implementation of the next edition of 29500-2 need *<b>not</b>* provide any support for XAdES at all. </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Rex</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> </span><a href="mailto:eb2mmrt@gmail.com" target="_blank"><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>eb2mmrt@gmail.com</span></a><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> [</span><a href="mailto:eb2mmrt@gmail.com" target="_blank"><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>mailto:eb2mmrt@gmail.com</span></a><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>] <b>On Behalf Of </b>MURATA Makoto<br><b>Sent:</b> Saturday, April 30, 2016 10:41 AM<br><b>To:</b> SC34 <</span><a href="mailto:e-SC34-WG4@ecma-international.org" target="_blank"><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>e-SC34-WG4@ecma-international.org</span></a><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>><br><b>Subject:</b> DR 11-0030: Proposal</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US> </span><o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>DR 11-0030</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> - OPC: Obsolete version of W3C XML Digital Signature 1.0</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="https://skydrive.live.com/view.aspx/Public%20Documents/2011/DR-11-0030.docx?cid=c8ba0861dc5e4adc&sc=documents" target="_blank"><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>https://skydrive.live.com/view.aspx/Public%20Documents/2011/DR-11-0030.docx?cid=c8ba0861dc5e4adc&sc=documents</span></a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>This DR requests a change in the normative reference of Part 2 §3 from XMLDSig 1.0 (</span><a href="http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/" target="_blank"><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/</span></a><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>) to XMLDSig 1.1 (</span><a href="http://www.w3.org/TR/xmldsig-core1/" target="_blank"><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>http://www.w3.org/TR/xmldsig-core1/</span></a><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>).</span><o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US> </span><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>We are committed to the introduction of XAdES EN into </span><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>the OPC revision. XAdES EN uses XML DSig 1.1 </span><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>rather than 1.0. I thus believe that we cannot stick </span><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>to DSig 1.0.</span><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US> </span><o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Regards,<br>Makoto</span><o:p></o:p></p></div></div></div></div></div></div></blockquote></div><p class=MsoNormal><br><br clear=all><o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal>-- <o:p></o:p></p><div><p class=MsoNormal><br>Praying for the victims of the Japan Tohoku earthquake<br><br>Makoto<o:p></o:p></p></div></div></div></body></html>