Digital Signature Series
The following blog posts are part of a series I wrote on digital signatures.
Read article: Digital Signature Series44 articles tagged Cryptography.
The following blog posts are part of a series I wrote on digital signatures.
Read article: Digital Signature SeriesThis post was originally published as “DSig Part 3: XML DSig vs. JSON Web Signtaure” on the Levvel Blog.
Read article: DSig Part 3: XML DSig vs. JSON Web SignatureThis post was originally published as “DSig Part 2: JSON Web Signature (JWS)” on the Levvel Blog.
Read article: DSig Part 2: JSON Web Signature (JWS)This post was originally published as “DSig Part 1: XML Digital Signature and WS-Security Integrity” on the Levvel Blog.
Read article: DSig Part 1: XML Digital Signature and WS-Security IntegrityThis tutorial describes how to convert a Binary Security Token extracted from a SOAP message into a valid PEM format that can be read by openssl or similar tool. If you are ever troubleshooting the use of X509v3 certificates used with WS-Security, this can come in very handy.
Read article: Convert an X509v3 Binary Security Token to PEM FormatThis post continues exploring the use of XML Digital Signature; this time we look at WS-Security Integrity (use of XML Digital Signatures with WS-Security). Our examples show a digital signature and a timestamp in a WS-Security <Security> SOAP Header.
Read article: WS-Security Integrity (XML Digital Signature)In the last post, we looked at the steps involved in generating a digital signature using the XML Digital Signature spec. The algorithm to produce a signature and validate it were explored but no examples were given. In this post, we’ll look at an example that is given in the XML Digital Signature…
Read article: XML Digital Signature (an Example)The XML DSig specification is used to provide digital signature functionality to XML Documents. It is is used by numerous other specs such as WS-Security and SAML2. This blog entry will describe how digital signatures work with an X509 private/public key pair.
Read article: XML Digital SignaturesIt’s been a few weeks since I have posted any updates. I started a new project at the beginning of June; it always takes a few weeks to get up to speed on an extended project. Integrating the IBM Tivoli Security stack and JBoss EAP was the subject of my JBoss World 2012 presentation.
Read article: JBoss World 2012 Session–Trusted Security with JBoss Enterprise Application PlatformI’ve been in a couple of shops that have used the HSM module option of DataPower for FIPS 140-2 v2 or v3 compliance. An HSM is a Hardware Security Module. My understanding is that there is a short list of IBM customers that are using this technology. I thought collecting all the information and…
Read article: DataPower Appliances & HSMs