Showing:

Annotations
Attributes
Diagrams
Facets
Properties
Source
Used by
Complex Type SignatureValueType
Namespace urn:us:gov:ic:tdf
Annotations

Stores the value of the Signature over the bound entities.

Diagram
Diagram CDSM-TDF_xsd_Complex_Type_SignatureValueType.tmp#SignatureValueType_signatureAlgorithm CDSM-TDF_xsd_Attribute_normalizationMethod.tmp#normalizationMethod CDSM-TDF_xsd_Attribute_includesStatementMetadata.tmp#includesStatementMetadata
Type extension of xs:base64Binary
Used by
Attributes
QName Type Use Annotation
includesStatementMetadata xs:boolean optional

Used to indicate whether or not to include element StatementMetadata when referencing an Assertion. In the case of signatures and binding, this attribute indicates whether or not the statement metadata is covered by the signature or binding. If not, it cannot be cryptographically verified and should be considered informative only. IncludesStatementMetadata should never be set on SignatureValue if there is a boundValueList, because the BoundValue elements in the list each have their own explicit includesStatementMetadata attribute.

normalizationMethod restriction of xs:anyURI required

A URI that provides guidance on how to format the included values such as whitespace, attributes, and child nodes in a universally consistent manner. The normalization method is essential to prevent formatting such as whitespace and order from interfering with the validation of the cryptographic integrity of data. Assertions should explicitly declare all their namespaces at the assertion level rather than relying on those provided by the root node.

signatureAlgorithm restriction of xs:string required
Source
<xs:complexType name="SignatureValueType">
  <xs:annotation>
    <xs:documentation>
      <p xmlns="http://www.w3.org/1999/xhtml" ism:classification="U" ism:ownerProducer="USA">Stores the value of the Signature over the bound entities.</p>
    </xs:documentation>
  </xs:annotation>
  <xs:simpleContent>
    <xs:extension base="xs:base64Binary">
      <!--Replacing:
<xs:attribute name="signatureAlgorithm" type="tdfsigal:CVEnumTDFSignatureAlgorithm" use="required">
                    <xs:annotation>
                        <xs:documentation>
                            <xhtml:p ism:classification="U" ism:ownerProducer="USA">The algorithm or
                                pattern used by the signature. The permissible values are defined in
                                the Controlled Value Enumeration: CVEnumTDFSignatureAlgorithm.xml
                            </xhtml:p>
                        </xs:documentation>
                    </xs:annotation>
                </xs:attribute>
-->
      <!-- CdsManifest: Replace entirety of signatureAlgorithm to disallow newer signing algorithms and keep Xsat Happy.  -->
      <xs:attribute name="signatureAlgorithm" use="required">
        <xs:simpleType>
          <xs:restriction base="xs:string">
            <xs:enumeration value="SHA256withRSA"/>
            <xs:enumeration value="SHA384withRSA"/>
            <xs:enumeration value="SHA512withRSA"/>
            <xs:enumeration value="SHA256withECDSA"/>
            <xs:enumeration value="SHA384withECDSA"/>
            <xs:enumeration value="SHA512withECDSA"/>
          </xs:restriction>
        </xs:simpleType>
      </xs:attribute>
      <xs:attribute ref="normalizationMethod" use="required"/>
      <xs:attribute ref="includesStatementMetadata" use="optional"/>
    </xs:extension>
  </xs:simpleContent>
</xs:complexType>
Schema location CDSM-TDF.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
Attribute SignatureValueType / @signatureAlgorithm
Namespace urn:us:gov:ic:tdf
Type restriction of xs:string
Properties
use required
Facets
enumeration SHA256withRSA
enumeration SHA384withRSA
enumeration SHA512withRSA
enumeration SHA256withECDSA
enumeration SHA384withECDSA
enumeration SHA512withECDSA
Used by
Complex Type SignatureValueType
Source
<xs:attribute name="signatureAlgorithm" use="required">
  <xs:simpleType>
    <xs:restriction base="xs:string">
      <xs:enumeration value="SHA256withRSA"/>
      <xs:enumeration value="SHA384withRSA"/>
      <xs:enumeration value="SHA512withRSA"/>
      <xs:enumeration value="SHA256withECDSA"/>
      <xs:enumeration value="SHA384withECDSA"/>
      <xs:enumeration value="SHA512withECDSA"/>
    </xs:restriction>
  </xs:simpleType>
</xs:attribute>
Schema location CDSM-TDF.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.

This document has been approved for Public Release by the Office of the Director of National Intelligence. See Distribution Notice for details. Click Here