- Home
- Download
- News
- Documentation

- FAQ
- Tutorial
- API reference
- Examples

- XML Digital Signature

- Online Verifier

- XML Encryption
- XML Canonicalization
- Reporting Bugs
- Mailing list
- Related
- Authors

# XML Security Library

XML Security Library is a C library based on LibXML2. The library supports major XML security standards:

- XML Signature
- XML Encryption
- Canonical XML (part of the LibXML2)
- Exclusive Canonical XML (part of the LibXML2)

XML Security Library is released under the MIT Licence see the Copyright file in the distribution for details.

News

- May 26 2010
  Changes in XML Security Library 1.2.16 release:
  - Created xmlsec-gcrypt library.
  - xmlsec-gcrypt: Added RSA with SHA1/SHA256/SHA384/SHA512/MD5/RIPEMD160, DSA with SHA1, AES/DES KW support.
  - xmlsec-gnutls: Added X509 support and converted the library to use xmlsec-gcrypt library for all crypto operations.
  xmlsec-mscrypto: RSA/OAEP and AES/DES KW support.
- Several minor bug fixes and code cleanups.

- April 29 2010
  Changes in XML Security Library 1.2.15 release:
  - xmlsec-mscrypto: Added HMAC with MD5, SHA1, SHA256/384/512; RSA with MD5, SHA256/384/512 support.
  - xmlsec-mscrypto: Converted to Unicode (the non-Unicode builds are still available as compile time option).
  - xmlsec-nss: Added MD5 and SHA256/384/512 support for digest, HMAC and RSA (the new minimum required version for NSS library is 3.9).
  - xmlsec-gnutls: Added SHA256/384/512 for digest and HMAC; MD5 and RIPEMD160 digests support (the new minimum required version for GnuTLS library is 2.8.0).
  - Fixed typo: "Copyrigth" should be "Copyright".
  - Several critical bug fixes and code cleanups.
- December 5 2009
  Changes in XML Security Library 1.2.14 release:
  - XMLSec library is switched from built-in LTDL library to the system LTDL library on Linux/Unix and native calls on Windows to fix security issue in LTDL.
  - Fixed minor bugs (see log for complete list).
- September 12 2009
  Changes in XML Security Library 1.2.13 release:
  - LibXML2 version 2.7.4 is now required
  - Implemented support for C14N version 1.1
  - Increase default minimum hmac size to 80 bits
  - Added support for --with-libxml-src and --with-libxslt-src ./configure options
  - Fixed XML dump output
- July 14 2009
  The new XML Security Library 1.2.12 release includes the following changes (see ChangeLog for the complete list of changes):
  - Fixed HMAC vulnerability with small values of HMAC length (CERT VU #466161).
  - Added support for the GOST implemented by Russian Crypto Pro CSP (patch from Dennis Prochko)
  - Added an option to return the replaced node (based on the patch from Frank Gross)
  - Added new function xmlSecNodeEncodeAndSetContent for encoding special chars in the node content.
  - Added configurable Base64 line length.
  - Bug fixes.