XML Encryption Draft Requirements

Status of this Document

This is draft intended to capture the consensus at the 01 March 2001 face-to-face meeting {FTF1}. This document has no formal status or standing yet, but it is hoped it will be issued as a Working Draft by the Working Group (WG) soon. Consequently, this document does not necessarily represent consensus. It's roughly based on the authors understanding of {prop1}, {prop2}, {prop3}, {C2000}, {WS}, {FTF1} and other discussion and proposals. Positions which are potentially in conflict are specified as a list of lettered points. For example:

1. Extensibility
2. 1. Position
   2. Alternative/Contrary Position

Additionally, editorial comments to the WG or reviewers is surrounded by a box.

Citation of a source (e.g., {source}) in no way indicates the originator or sole supporter of that requirement. Instead, it helps track at least one source/motivation of the requirement or comment.

Please send comments to the editor <reagle@w3.org> and cc: the list  xml-encryption@w3.org (archives) Publication of this document does not imply endorsement by the W3C membership. This is a draft document and may be updated, replaced or obsoleted by other documents at any time.

Abstract

This document lists the design principles, scope, and requirements for the XML Encryption. It includes requirements as they relate to the encryption syntax, data model, format, cryptographic processing, and external requirements and coordination.

Table of Contents

1. Introduction
2. Design Principles and Scope
3. Requirements
   1. Encryption Data Model and Syntax
   2. Objects
   3. Processing
   4. Algorithms and Structures
   5. Security
   6. Coordination
   7. Intellectual Property
4. References

1. Introduction

The XML 1.0 Recommendation [XML] describes the syntax of a class of data objects called XML documents. There is interest in a specification of XML syntax and processing for encrypting digital content, including portions of XML documents and protocol messages. This documents provides requirements for such a specification.

2. Design Principles and Scope

This section describes high level principles of design and definition of scope. They are an expression of intent/motivation. How these motivations are realized are addressed in subsequent sections.

1. The XML Encryption specification must describe how to use XML to represent a digitally encrypted Web resource (including XML itself). {prop1, prop2}. The XML representation of the encrypted resource must be a first class object (i.e., referenced) and represented by a distinct element type.
   1. The specification must provide for the encryption of a