Skip to main content

XML namespace

XML Signature

Digital signatures embedded in the XML they sign. The namespace behind SAML assertions, signed SOAP messages and e-invoicing mandates.

xmlns:ds="http://www.w3.org/2000/09/xmldsig#"

XML Signature signs a document from inside it: <ds:Signature> holds the digest, the algorithms and usually the signing certificate, and sits within the very document whose contents it covers.

That is why canonicalisation matters so much here. Two byte-different documents can be the same XML — attribute order, namespace declarations and whitespace all vary freely — so the signature is computed over a canonical form (C14N) rather than the raw bytes. Reformat a signed document with a tool that does not preserve canonical form and the signature breaks while the document stays valid.

You will meet it in SAML single sign-on, in WS-Security SOAP headers, and in national e-invoicing schemes that require a signed invoice.

URI
http://www.w3.org/2000/09/xmldsig#
Prefix
ds
Elements
SignatureSignedInfoSignatureValueKeyInfoReferenceDigestValue

Specification: XML Signature Syntax and Processing

Get started

Bring order to the XML your team can't afford to ignore.

Create a free account and get a private workspace to search, validate, diff, and monitor your XML feeds, sitemaps, schemas, and vendor integrations.