문제

XML-DSig describes 3 positions where the signature of an XML document can be placed relatively to the XML document : the signature can be detached, enveloping, enveloped

What are the implications in terms of performance of these three options?

도움이 되었습니까?

해결책

Detached will be a bit more efficient, but the difference is minimal (of course it depends on document size - with a 100Mb document the difference would be larger, than with small XML blocks).

다른 팁

Since XMLdSig is not written keeping in mind that performance or file size can be a problem; streaming is not possible. With large data to be signed, it really is a problem, since DOM objects eat lots of memory, believe me. Enveloping or enveloped does not matter in this respect.

This is where detached signatures shine. Signature itself is not that large, and data to be signed can be streamed, since you only need hash of it.

라이센스 : CC-BY-SA ~와 함께 속성
제휴하지 않습니다 StackOverflow
scroll top