Using the W3C WebCrypto API for Document Signing
نویسندگان
چکیده
This paper focuses on digitally signing documents as a specific use case for making secure hardware available to a web application. We explore the current options available to implementers and the drawbacks associated with each option. Then we look at the emerging Web Cryptography API developed by the W3C and discover missing functionality needed to implement this use case. Finally, we suggest a way to extend the API in order to support digitally signing documents using secure hardware.
منابع مشابه
Implementing a Serializer Using a Java XML Schema API
W3C XML (Extensible Markup Language) Schema defines a set of abstract components, which carry the core semantics of document structure definition. There has been no standard API for accessing these components or their structures yet. The MARKUP Technology Company has specified a Java API for accessing XML Schema and submitted it to the W3C as a possible basis for standard Schema API. An overvie...
متن کاملمطالعه تطبیقی نمایندگی در امضای اسناد تجاری (برات، سفته و چک)
According to the Article 227 of Commerce Law and Article 19 drawing cheque in respective with appointing a representation for issuance of draft and cheque, the following questions have always been present: a) whether this representation exists only at the time of signing a document or it will be present at other stages such as endorsement and assurance, too? b) Whether the responsibility of s...
متن کاملThe W3C Web Cryptography API: Design and Issues
The W3C Web Cryptography API will be the standard API for accessing cryptographic primitives in Javascript-based environments. We describe the motivations behind the creation of the W3C Web Cryptography API, deal with a number of objections, and then describe the API in detail with motivating use-cases and sample code. Lastly, we outline open issues and how the wider academic and security commu...
متن کاملPrivacy Issues of the W3C Geolocation API
The W3C’s Geolocation API may rapidly standardize the transmission of location information on the Web, but, in dealing with such sensitive information, it also raises serious privacy concerns. We analyze the manner and extent to which the current W3C Geolocation API provides mechanisms to support privacy. We propose a privacy framework for the consideration of location information and use it to...
متن کاملThe design and implementation of an application program interface for securing XML documents
The encryption and signature standards proposed by W3C specifying the format for encrypted XML documents are important advances towards XML security [Eastlake, Donald, Reagle, Joseph, Imamura, Takeshi, Dillaway, Blair, Simon, Ed, 2002. XML Encryption Syntax and Processing. W3C Recommendation 10 December 2002 , Eastlake, Donald, Reagle, Joseph, Solo, David, Bar...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2013