RealTime IT News

XML Encryption Added to Apache Project

UPDATED: The Apache Foundation has announced the addition of a beta implementation of XML Encryption to its XML Security Project, another small step towards full implementation of security standards in the pared-down markup language.

The XML Security Project, a volunteer unit of the Apache Foundation, focuses on W3C standards for XML security implementation.

With the beta for XML Encryption, the Project has added support for the encrypting and decrypting of XML-based digital content.

The latest release also includes an initial implementation of pluggable algorithm handlers. The XML Security Project currently offer two libraries -- a Java library with a mature Digital Signature implementation and a more basic C++ library.

While XML has enjoyed increased adoption for data exchange between a range of applications, the growth of the programming language has been held back by security concerns.

Though encryption of an entire XML document is considered straightforward, developers have had a hard time encrypting, testing and decrypting sections of documents.

The W3C has set up a working group to develop specs for XML security. The work deals with issues of XML encryption, XML signature, XACL, SAML, and XKMS. Information on the W3C's work is available online.

Updates prior version, which said the release came out Thursday