XML Security Suite: Increasing the Security of E-Business
By Doug Tidwell
2005-05-18
Resources
Find the specification of the ASN.1 basic notation and the complete set of ASN.1 standards at the International Telecommunication Union Web site.
For details about canonical XML, see the Canonical XML working draft from W3C.
For a great book on cryptography, check out Applied Cryptography by Bruce Schneier. Described by Wired magazine as "The book the National Security Agency wanted never to be published," it has everything you ever wanted to know about cryptography, and then some.
Read about and download the Java Cryptography Extension and find a list of cryptographic service providers.
Download the Java 2 Development Kit, Version 1.2 or higher, from Sun, IBM, and other places on the Web.
Read about and download the JavaMail API implementation, a set of abstract classes that model a mail system.
If you'd like to know the ropes of Java security, check out the Security Trail of the Java Tutorial.
Read about and download Open JCE, a free, open-source implementation of the JCE API.
Download the IBM XML Parser for Java Version 3.0.1 from alphaWorks.
Download the XML Security Suite from alphaWorks. The download package includes the code, documentation, and all the sample programs discussed in this article.
Reference the home page of the XML-signature working group, a joint activity of the W3C and the IETF. The latest draft of the XML signature proposal is available.
Find the standard for X.509 certificates as defined by the ITU. You can get your very own X.509 certificate from any of several certificate authorities, including VeriSign.
Learn about color-coding your listings with Emacs at www.gnu.org.
Find more XML resources on the developerWorks XML zone.
Tutorial Pages:
»
A brief overview of Web security
»
Creating a secure session
»
The XML Security Suite
»
XML Signatures
»
About the sample programs
»
Creating a certificate
»
Signing an internal XML resource
»
Signing an external XML resource
»
Signing a non-XML resource
»
Verifying a digital signature
»
The joys of nonrepudiability
»
Canonical XML
»
Element-level encryption
»
Other utilities
»
Summary
» Resources
First published by IBM DeveloperWorks
|
 |
|
