XML signatures and RELAX NG schemas in ISO/IEC 29500-2 (OPC of OOXML)

[Chris Rae]

Hi Murata-san - regarding submitting DRs against OPC, both XML Signature 1.1 and XML Signature Properties are still in draft status, so it might not be a good idea to refer to them. Also, the XAdES support currently implemented in MCE by Office 2010 may make Signature Properties unnecessary if that XAdES support becomes a part of the new Extensions standard.

If you have specific defects in mind then we could definitely talk through them here on the list, though?

Chris

-----Original Message-----
From: MURATA Makoto (FAMILY Given) [mailto:eb2m-mrt at asahi-net.or.jp] 
Sent: 10 July 2010 06:05
To: e-SC34-WG4 at ecma-international.org
Subject: XML signatures and RELAX NG schemas in ISO/IEC 29500-2 (OPC of OOXML)

Dear colleagues,

I had a chance to contribute to the RELAX NG schemas for XML signature and encryption.  The result is "XML Security RELAX NG Schemas", available at:

http://www.w3.org/2008/xmlsec/Drafts/xmlsec-rngschema/Overview.html

ISO/IEC 29500-2 (OPC of OOXML) uses XML signatures (but not encryption).  

http://standards.iso.org/ittf/PubliclyAvailableStandards/c051459_ISOIEC%2029500-2_2008(E).zip
http://standards.iso.org/ittf/PubliclyAvailableStandards/c051459_ISOIEC%2029500-2_2008_Electronic_inserts.zip

Since ISO/IEC 29500- contains RELAX NG schemas (non-normative) for OPC, I believe that we should revise our schemas when W3C publishes the final version of "XML Security RELAX NG Schemas".  I will submit a defect report about this when the final version is ready.

I am still a novice of digital signature and encryption, but I have come to wonder why OPC does not use XML signature 1.1 and does not reference to exclusive C14N, XML Signature Properties, and so forth.  Should I submit some defect reports?

Cheers,
Makoto