Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rtc: Signature verification fails for XMLs that are not in their canonical form #246

Open
ycouce-cdd opened this issue Oct 14, 2021 · 0 comments
Labels
bug Something isn't working component: rtc component: sii_crypto crypto particular to the SII (unlike 'crypto')

Comments

@ycouce-cdd
Copy link
Member

Even though it is assumed that a canonicalization algorithm is applied before performing the digital signature calculations of the XML, even if it is referenced in the SignedInfo element, it does not mean that it was necessarily applied. Unfortunately, the SII does not verify that the XML is in its canonical form, so it is common that several of the AECs accepted by the SII are not normalized (See discussion at #242).
For this reason, the signature verification algorithm will fail in those XMLs that, by canonicalizing them before verifying their signature, the normalization introduces changes that modify the content of the XML, e.g. documents containing empty-element tags

@ycouce-cdd ycouce-cdd added bug Something isn't working component: rtc labels Oct 14, 2021
@glarrain-cdd glarrain-cdd added the component: sii_crypto crypto particular to the SII (unlike 'crypto') label Dec 27, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working component: rtc component: sii_crypto crypto particular to the SII (unlike 'crypto')
Projects
None yet
Development

No branches or pull requests

2 participants