XML Canonicalization Requirements W3C Note 5-June-1999 This version: http://www.w3.org/TR/1999/NOTE-xml-canonical-req-19990605 Latest version: http://www.w3.org/TR/NOTE-xml-canonical-req Previous version http://www.w3.org/TR/1999/NOTE-xml-canonical-req-19990307 Editors James Tauber ( [email protected] ) Joel Nava ( [email protected] ) Copyright � 1999 W3C ( MIT , INRIA , Keio ), All Rights Reserved. W3C liability , trademark , document use and software licensing rules apply. Status of this document This is a W3C Note produced as a deliverable of the XML Syntax WG according to its charter. A list of current W3C Working Drafts and Notes can be found at http://www.w3.org/TR . This document is a work in progress representing the current consensus of the W3C XML Syntax Working Group. This version of the XML Canonicalization Requirements document has been approved by the XML Syntax Working Group and the XML Plenary to be posted for review by W3C members and other interested parties. Publication of this specification does not imply endorsement by the W3C membership. Comments should be sent to the automatically and publicly archived email list: [email protected] . This document is being processed according to the following review schedule: Review Schedule Process Closing Date Status Contact XML Syntax WG sign off 1999/05/26 Done XML Syntax WG XML CG Review 199/05/28 Done XML Syntax WG XML-DSig review 1999/06/4 Done XML Syntax WG, W3C/IETF XML-DSig WG, [email protected] XML Plenary sign off 1999/06/4 Done [email protected] , [email protected] , [email protected] Publish as W3C Note 1999/06/7 Done [email protected] Checkpoint of comments 1999/06/28 Underway [email protected] Comments about this document should be submitted to the "contact" listed above for each process. Abstract This document lists the design principles, scope and requirements for the Canonicalization of XML for digital signatures in XML and XML Processor conformance. These are being developed by the World Wide Web Consortium's XML Syntax Working Group. Table of Contents 1. Introduction 2. Design Principles and Scope 3. Requirements 4. References 1. Introduction The XML 1.0 Recommendation [XML] describes the syntax of a class of data objects called XML documents. It is possible, however, for logically equivalent XML documents to differ in their physical representation. In particular, two equivalent XML documents may differ on such issues as physical (i.e. entity) structure, attribute ordering, character encoding and insignificant whitespace. This means that equivalence testing cannot be done at the byte level for arbitrary XML documents. Though, byte level equivalence testing is useful in the domain of digital signatures for XML. Work has started elsewhere on the broader question of digital signatures in XML [IOTP-DSig, Brown-XML-DSig, DOMHASH]. The W3C hosted a workshop on signed XML [DS-XML], and is forming a W3C/IETF XML-DSig WG [XML-DSig]. The Canonical XML specification aims to introduce a notion of equivalence between XML documents which can be tested at the syntactic level and, in particular, by byte-for-byte comparison. It shall describe the canonicalization of XML documents such that logically equivalent documents will have the same byte-for-byte representation. This form is referred to as the canonical form of the document. 2. Design Principles and Scope The specification for Canonical XML shall describe how to derive the canonical form of any XML document. Canonicalization shall reflect the logical structure of the XML document and decide whether to retain any of the physical (i.e. entity) structure. The specification shall not consider the canonicalization of the document type declaration. The specification shall consider the canonicalization of documents that make use of namespaces. Canonicalization shall be designed to be consistent with the XML Information Set Specification [Infoset-WD] and W3C I18N work [Char-Mod, Char-Req]. Canonicalization shall be designed in coordination with the W3C/IETF XML-DSig WG [XML-DSig], and the XML Information Set WG. To that end, The XML Syntax WG shall do the following: Allow WG emails, to do with canonicalization, to be summarized, forwarded, or cross posted to the XML-DSig WG's public email list and the XML Information Set WG's internal email list. Be dependent on the review of the Specification by the XML-DSig WG and the, XML Information Set WG and allow them to hold up the Last Call, PR or REC process if needed. The specification proposes to describe 3 level of canonicalization, changeable by the needs of the DSig WG: Level 0 - Do nothing to the XML document. Level 1 - Convert the encoding of the document to UTF-8 is it is not already UTF-8 Level 2 - Whatever is decided upon as full Canonicalization. The WG will decide if it can propose one full Canonicalization for both use cases, or to come up with different algorithms for each. 3. Requirements Every XML document shall have a unique canonical form. The canonical form of an XML document shall be a well formed XML document with the following invariant property: Any XML document, say X, processed by a canonicalizer, will produce an XML Document X'. X' passed through the same canonicalizer must produce X'. X' passed through any other conforming canonicalizer should produce X', or else one of them in not conformant. Canonicalization shall produce byte comparable forms of characters defined by Unicode [Unicode] to be equivalent. The canonical form shall use the terms from, and work in cooperation with the XML Information Set WG to ensure there is no confusion between the Canonicalization and Information Set specifications. 4. References XML Extensible Markup Language (XML) Recommendation. http://www.w3.org/TR/REC-xml Namespaces Namespaces in XML Recommendation. http://www.w3.org/TR/REC-xml-names Infoset-WD XML Information Set Working Draft of May 17, 1999. http://www.w3.org/TR/xml-infoset Char-Mod Character Model for the World Wide Web Working Draft http://www.w3.org/TR/WD-charmod Char-Req Requirements for String Identity and Character Indexing Definitions for the WWW http://www.w3.org/TR/WD-charreq XML-DSig The W3C/IETF XML-DSig Charter http://www.w3.org/1999/05/XML-DSig-charter-990521.html Unicode The Unicode Consortium. The Unicode Standard, Version 2.0. Reading, Mass.: Addison-Wesley Developers Press, 1996 IOTP-DSig Internet Draft. Digital Signatures for the Internet Open Trading Protocol http://www.ietf.org/internet-drafts/draft-ietf-trade-iotp-v1.0-dsig-00.txt Brown-XML-DSig Internet Draft. Digital Signatures for XML http://search.ietf.org/internet-drafts/draft-brown-xml-dsig-00.txt DOMHASH Internet Draft. Digest Values for DOM (DOMHASH) http://search.ietf.org/internet-drafts/draft-hiroshi-dom-hash-01.txt DS-XML XML-DSig '99: The W3C Signed XML Workshop http://www.w3.org/1999/02/ds-xml-cfp-19990218.html