Appendix A. XML Security Implementations

The existence of numerous independent, interoperable implementations shows the vitality of a protocol. In fact, the existence of such implementations is a key criterion for advancing beyond the first rung of the IETF standardization ladder.

Explicit interoperability testing has been performed for Canonical XML, XMLDSIG, XML Encryption, and Exclusive XML Canonicalization. Furthermore, several sources have indicated the availability of toolkits, software development kits (SDKs), source code, or test vectors for these standards and XKMS.

The latest Canonical XML interoperability matrix is found at

http://www.w3.org/Signature/2000/10/10-c14n-interop.html

and is linked off the XMLDSIG Working Group site [XMLDSIG WG]. Note that, at the time this book goes to press, it has not been updated since July 2001. Participation in that interoperability primarily indicates early involvement. The XMLDSIG interoperability matrix also details the interoperability of Canonical XML features. For this reason, it is not important if a current XMLDSIG interoperability participant was not included in the old Canonical XML interoperability matrix.

The latest XMLDSIG interoperability matrix is found at

http://www.w3.org/Signature/2001/04/05-xmldsig-interop.html

and is linked off the XMLDSIG Working Group site [XMLDSIG WG]. Notwithstanding its file name, it was updated in April 2002. It is a reasonable place to look for information on XMLDSIG and Canonical XML implementations.

The latest XML Encryption interoperability matrix is found at

http://www.w3.org/Encryption/2002/02-xenc-interop.html

and is linked off the XML Encryption Working Group site [XMLENC WG]. As this book goes to press, information is being added to this matrix. In the future, it should be a reasonable place to look for information on XML Encryption implementations.

The latest Exclusive XML Canonicalization interoperability matrix is found at

http://www.w3.org/Signature/2002/02/01-exc-c14n-interop.html

and is linked off the XMLDSIG Working Group site [XMLDSIG WG]. As this book goes to press, information is being added to this matrix. In the future, it should be a reasonable place to look for information on Exclusive XML Canonicalization implementations.

No interoperability-testing matrix has been created for XKMS as yet, but one will likely appear at some point in the future.

The information in this appendix is taken from the [XMLDSIG WG], [XMLENC WG], and [XKMS WG] Working Group Web sites, the Web sites of the participating companies and persons, and other sources. No attempt has been made to confirm the information, and its accuracy is not guaranteed. Licenses or payment may be required to use some of the resources listed here. The information presented here continues to evolve rapidly and will change.

Table A-1 provides a general implementation overview. The following sections give some information on the implementation or other resources available from each company or person listed in Table A-1.