Skip to main content

Search 412 pages — tools, formats, elements, namespaces, directory, comparisons, XPath, datatypes, glossary, parse errors, schema errors, use cases, guides, blog and product.

XML namespace

XML Signature

Digital signatures embedded in the XML they sign. The namespace behind SAML assertions, signed SOAP messages and e-invoicing mandates.

xmlns:ds="http://www.w3.org/2000/09/xmldsig#"

XML Signature signs a document from inside it: <ds:Signature> holds the digest, the algorithms and usually the signing certificate, and sits within the very document whose contents it covers.

That is why canonicalisation matters so much here. Two byte-different documents can be the same XML — attribute order, namespace declarations and whitespace all vary freely — so the signature is computed over a canonical form (C14N) rather than the raw bytes. Reformat a signed document with a tool that does not preserve canonical form and the signature breaks while the document stays valid.

You will meet it in SAML single sign-on, in WS-Security SOAP headers, and in national e-invoicing schemes that require a signed invoice.

URI
http://www.w3.org/2000/09/xmldsig#
Prefix
ds
Elements
SignatureSignedInfoSignatureValueKeyInfoReferenceDigestValue

Specification: XML Signature Syntax and Processing

Get started

Bring order to the XML your team can't afford to ignore.

Create a free account and get a private workspace to search, validate, diff, and monitor your XML feeds, sitemaps, schemas, and vendor integrations.