XKMS

Please refer to the errata for this document, which may include some normative corrections. [2]This document specifies protocols for distributing and registering public keys, suitable for use in conjunction with the W3C Recommendations for XML Signature [[XML-SIG]]( and XML Encryption [XML-Enc ]. The XML Key Management Specification (XKMS) comprises two parts — the XML Key Information Service Specification (X-KISS) and the XML Key Registration Service Specification (X-KRSS). This section describes the status of this document at the time of its publication. Other documents may supersede this document. A list of current W3C publications and the latest revision of this technical report can be found in the W3C technical reports index at This document has been produced by the XKMS Working Group (WG). The English version of this specification is the only normative version. Translations of this document may be available. This is Part 1 of the W3C Recommendation for the XML Key Management Specification (XKMS Version 2.0). This document specifies protocols for distributing and registering public keys, suitable for use in conjunction with the proposed standard for XML Signature and XML Encryption . The XML Key Management Specification (XKMS) comprises two services — the XML Key Information Service (X-KISS) and the XML Key Registration Service Specification (X-KRSS). Part 2 of this specification covers different protocol bindings with security characteristics for XKMS. For background on this work, please see the XKMS Activity Statement . This document was produced under the 24 January 2002 CPP as amended by the W3C Patent Policy Transition Procedure . The Working Group maintains a public list of patent disclosures relevant to this document; that page also includes instructions for disclosing a patent. An individual who has actual knowledge of a patent which the individual believes contains Essential Claim(s) with respect to this specification should disclose the information in accordance with section 6 of the W3C Patent Policy . 1.4 Key Information Service Overview (Non-Normative) 1.5 Key Registration Service Overview (Non-Normative) 1.6 Structure of this document 8 Cryptographic Algorithm Specific Parameters 8.1 Use of Limited-Use Shared Secret Data [8]This document specifies protocols for distributing and registering public keys, suitable for use in conjunction with the standard for XML Signatures [[XML-SIG]]( defined by the World Wide Web Consortium (W3C) and the Internet Engineering Task Force (IETF) and companion standard for XML encryption [[XML-ENC]]( . The XML Key Management Specification (XKMS) comprises two parts -- the XML Key Information Service Specification (X-KISS) and the XML Key Registration Service Specification (X-KRSS). [9]These protocols do not require any particular underlying public key infrastructure (such as X.509) but are designed to be compatible with such infrastructures. [11]This specification uses XML Schemas [XML-schema ] to describe the content model. [13]"they MUST only be used where it is actually required for interoperation or to limit behavior which has potential for causing harm (e.g., limiting retransmissions)" [14]Consequently, we use these capitalized keywords to unambiguously specify requirements over protocol and application features and behavior that affect the interoperability and security of implementations. These key words are not used (capitalized) to describe XML grammar; schema definitions unambiguously describe such requirements and we wish to reserve the prominence of these terms for the natural language descriptions of protocols and features. For instance, an XML attribute might be described as being "optional." Compliance with the XML-namespace specification [XML-NS ] is described as "REQUIRED." [20a] Payload Security Use of end-to-end security mechanisms, such as XML DSIG, not dependent on the transport mechanism (HTTP, TLS, SOAP, ...). [22]This namespace is also used as