1 <?xml version="1.0" encoding="utf-8"?>
3 PUBLIC "-//W3C//DTD XMLSchema 200102//EN" "http://www.w3.org/2001/XMLSchema.dtd"
6 xmlns:ds CDATA #FIXED "http://www.w3.org/2000/09/xmldsig#">
7 <!ENTITY dsig 'http://www.w3.org/2000/09/xmldsig#'>
12 <!-- Schema for XML Signatures
13 http://www.w3.org/2000/09/xmldsig#
14 $Revision: 1.1 $ on $Date: 2002/02/08 20:32:26 $ by $Author: reagle $
16 Copyright 2001 The Internet Society and W3C (Massachusetts Institute
17 of Technology, Institut National de Recherche en Informatique et en
18 Automatique, Keio University). All Rights Reserved.
19 http://www.w3.org/Consortium/Legal/
21 This document is governed by the W3C Software License [1] as described
24 [1] http://www.w3.org/Consortium/Legal/copyright-software-19980720
25 [2] http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD
29 <schema xmlns="http://www.w3.org/2001/XMLSchema"
30 xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
31 targetNamespace="http://www.w3.org/2000/09/xmldsig#"
32 version="0.1" elementFormDefault="qualified">
34 <!-- Basic Types Defined for Signatures -->
36 <simpleType name="CryptoBinary">
37 <restriction base="base64Binary">
41 <!-- Start Signature -->
43 <element name="Signature" type="ds:SignatureType"/>
44 <complexType name="SignatureType">
46 <element ref="ds:SignedInfo"/>
47 <element ref="ds:SignatureValue"/>
48 <element ref="ds:KeyInfo" minOccurs="0"/>
49 <element ref="ds:Object" minOccurs="0" maxOccurs="unbounded"/>
51 <attribute name="Id" type="ID" use="optional"/>
54 <element name="SignatureValue" type="ds:SignatureValueType"/>
55 <complexType name="SignatureValueType">
57 <extension base="base64Binary">
58 <attribute name="Id" type="ID" use="optional"/>
63 <!-- Start SignedInfo -->
65 <element name="SignedInfo" type="ds:SignedInfoType"/>
66 <complexType name="SignedInfoType">
68 <element ref="ds:CanonicalizationMethod"/>
69 <element ref="ds:SignatureMethod"/>
70 <element ref="ds:Reference" maxOccurs="unbounded"/>
72 <attribute name="Id" type="ID" use="optional"/>
75 <element name="CanonicalizationMethod" type="ds:CanonicalizationMethodType"/>
76 <complexType name="CanonicalizationMethodType" mixed="true">
78 <any namespace="##any" minOccurs="0" maxOccurs="unbounded"/>
79 <!-- (0,unbounded) elements from (1,1) namespace -->
81 <attribute name="Algorithm" type="anyURI" use="required"/>
84 <element name="SignatureMethod" type="ds:SignatureMethodType"/>
85 <complexType name="SignatureMethodType" mixed="true">
87 <element name="HMACOutputLength" minOccurs="0" type="ds:HMACOutputLengthType"/>
88 <any namespace="##other" minOccurs="0" maxOccurs="unbounded"/>
89 <!-- (0,unbounded) elements from (1,1) external namespace -->
91 <attribute name="Algorithm" type="anyURI" use="required"/>
94 <!-- Start Reference -->
96 <element name="Reference" type="ds:ReferenceType"/>
97 <complexType name="ReferenceType">
99 <element ref="ds:Transforms" minOccurs="0"/>
100 <element ref="ds:DigestMethod"/>
101 <element ref="ds:DigestValue"/>
103 <attribute name="Id" type="ID" use="optional"/>
104 <attribute name="URI" type="anyURI" use="optional"/>
105 <attribute name="Type" type="anyURI" use="optional"/>
108 <element name="Transforms" type="ds:TransformsType"/>
109 <complexType name="TransformsType">
111 <element ref="ds:Transform" maxOccurs="unbounded"/>
115 <element name="Transform" type="ds:TransformType"/>
116 <complexType name="TransformType" mixed="true">
117 <choice minOccurs="0" maxOccurs="unbounded">
118 <any namespace="##other" processContents="lax"/>
119 <!-- (1,1) elements from (0,unbounded) namespaces -->
120 <element name="XPath" type="string"/>
122 <attribute name="Algorithm" type="anyURI" use="required"/>
125 <!-- End Reference -->
127 <element name="DigestMethod" type="ds:DigestMethodType"/>
128 <complexType name="DigestMethodType" mixed="true">
130 <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
132 <attribute name="Algorithm" type="anyURI" use="required"/>
135 <element name="DigestValue" type="ds:DigestValueType"/>
136 <simpleType name="DigestValueType">
137 <restriction base="base64Binary"/>
140 <!-- End SignedInfo -->
142 <!-- Start KeyInfo -->
144 <element name="KeyInfo" type="ds:KeyInfoType"/>
145 <complexType name="KeyInfoType" mixed="true">
146 <choice maxOccurs="unbounded">
147 <element ref="ds:KeyName"/>
148 <element ref="ds:KeyValue"/>
149 <element ref="ds:RetrievalMethod"/>
150 <element ref="ds:X509Data"/>
151 <element ref="ds:PGPData"/>
152 <element ref="ds:SPKIData"/>
153 <element ref="ds:MgmtData"/>
154 <any processContents="lax" namespace="##other"/>
155 <!-- (1,1) elements from (0,unbounded) namespaces -->
157 <attribute name="Id" type="ID" use="optional"/>
160 <element name="KeyName" type="string"/>
161 <element name="MgmtData" type="string"/>
163 <element name="KeyValue" type="ds:KeyValueType"/>
164 <complexType name="KeyValueType" mixed="true">
166 <element ref="ds:DSAKeyValue"/>
167 <element ref="ds:RSAKeyValue"/>
168 <element ref="ds:ECKeyValue"/>
169 <any namespace="##other" processContents="lax"/>
173 <!-- ECDSA KEY DEFINITIONS -->
175 <element name="ECKeyValue" type="ds:ECKeyValueType"/>
176 <complexType name="ECKeyValueType">
179 <element name="ECParameters" type="ds:ECParametersType"/>
180 <element name="NamedCurve" type="ds:NamedCurveType"/>
182 <element name="PublicKey" type="ds:ECPointType"/>
184 <attribute name="Id" type="ID" use="optional"/>
187 <complexType name="NamedCurveType">
188 <attribute name="URI" type="anyURI" use="required"/>
191 <simpleType name="ECPointType">
192 <restriction base="ds:CryptoBinary"/>
195 <element name="RetrievalMethod" type="ds:RetrievalMethodType"/>
196 <complexType name="RetrievalMethodType">
198 <element ref="ds:Transforms" minOccurs="0"/>
200 <attribute name="URI" type="anyURI"/>
201 <attribute name="Type" type="anyURI" use="optional"/>
204 <complexType name="ECParametersType">
206 <element name="FieldID" type="ds:FieldIDType"/>
207 <element name="Curve" type="ds:CurveType"/>
208 <element name="Base" type="ds:ECPointType"/>
209 <element name="Order" type="ds:CryptoBinary"/>
210 <element name="CoFactor" type="integer" minOccurs="0"/>
211 <element name="ValidationData" type="ds:ECValidationDataType" minOccurs="0"/>
215 <complexType name="FieldIDType">
217 <element ref="ds:Prime"/>
218 <element ref="ds:TnB"/>
219 <element ref="ds:PnB"/>
220 <element ref="ds:GnB"/>
221 <any namespace="##other" processContents="lax"/>
225 <element name="Prime" type="ds:PrimeFieldParamsType"/>
226 <complexType name="PrimeFieldParamsType">
228 <element name="P" type="ds:CryptoBinary"/>
232 <element name="GnB" type="ds:CharTwoFieldParamsType"/>
233 <complexType name="CharTwoFieldParamsType">
235 <element name="M" type="positiveInteger"/>
239 <element name="TnB" type="ds:TnBFieldParamsType"/>
240 <complexType name="TnBFieldParamsType">
242 <extension base="ds:CharTwoFieldParamsType">
244 <element name="K" type="positiveInteger"/>
250 <element name="PnB" type="ds:PnBFieldParamsType"/>
251 <complexType name="PnBFieldParamsType">
253 <extension base="ds:CharTwoFieldParamsType">
255 <element name="K1" type="positiveInteger"/>
256 <element name="K2" type="positiveInteger"/>
257 <element name="K3" type="positiveInteger"/>
263 <complexType name="CurveType">
265 <element name="A" type="ds:CryptoBinary"/>
266 <element name="B" type="ds:CryptoBinary"/>
270 <complexType name="ECValidationDataType">
272 <element name="seed" type="ds:CryptoBinary"/>
274 <attribute name="hashAlgorithm" type="anyURI" use="required"/>
278 <!-- Start X509Data -->
280 <element name="X509Data" type="ds:X509DataType"/>
281 <complexType name="X509DataType">
282 <sequence maxOccurs="unbounded">
284 <element name="X509IssuerSerial" type="ds:X509IssuerSerialType"/>
285 <element name="X509SKI" type="base64Binary"/>
286 <element name="X509SubjectName" type="string"/>
287 <element name="X509Certificate" type="base64Binary"/>
288 <element name="X509CRL" type="base64Binary"/>
289 <any namespace="##other" processContents="lax"/>
294 <complexType name="X509IssuerSerialType">
296 <element name="X509IssuerName" type="string"/>
297 <element name="X509SerialNumber" type="integer"/>
301 <!-- End X509Data -->
303 <!-- Begin PGPData -->
305 <element name="PGPData" type="ds:PGPDataType"/>
306 <complexType name="PGPDataType">
309 <element name="PGPKeyID" type="base64Binary"/>
310 <element name="PGPKeyPacket" type="base64Binary" minOccurs="0"/>
311 <any namespace="##other" processContents="lax" minOccurs="0"
312 maxOccurs="unbounded"/>
315 <element name="PGPKeyPacket" type="base64Binary"/>
316 <any namespace="##other" processContents="lax" minOccurs="0"
317 maxOccurs="unbounded"/>
324 <!-- Begin SPKIData -->
326 <element name="SPKIData" type="ds:SPKIDataType"/>
327 <complexType name="SPKIDataType">
328 <sequence maxOccurs="unbounded">
329 <element name="SPKISexp" type="base64Binary"/>
330 <any namespace="##other" processContents="lax" minOccurs="0"/>
334 <!-- End SPKIData -->
338 <!-- Start Object (Manifest, SignatureProperty) -->
340 <element name="Object" type="ds:ObjectType"/>
341 <complexType name="ObjectType" mixed="true">
342 <sequence minOccurs="0" maxOccurs="unbounded">
343 <any namespace="##any" processContents="lax"/>
345 <attribute name="Id" type="ID" use="optional"/>
346 <attribute name="MimeType" type="string" use="optional"/> <!-- add a grep facet -->
347 <attribute name="Encoding" type="anyURI" use="optional"/>
350 <element name="Manifest" type="ds:ManifestType"/>
351 <complexType name="ManifestType">
353 <element ref="ds:Reference" maxOccurs="unbounded"/>
355 <attribute name="Id" type="ID" use="optional"/>
358 <element name="SignatureProperties" type="ds:SignaturePropertiesType"/>
359 <complexType name="SignaturePropertiesType">
361 <element ref="ds:SignatureProperty" maxOccurs="unbounded"/>
363 <attribute name="Id" type="ID" use="optional"/>
366 <element name="SignatureProperty" type="ds:SignaturePropertyType"/>
367 <complexType name="SignaturePropertyType" mixed="true">
368 <choice maxOccurs="unbounded">
369 <any namespace="##other" processContents="lax"/>
370 <!-- (1,1) elements from (1,unbounded) namespaces -->
372 <attribute name="Target" type="anyURI" use="required"/>
373 <attribute name="Id" type="ID" use="optional"/>
376 <!-- End Object (Manifest, SignatureProperty) -->
378 <!-- Start Algorithm Parameters -->
380 <simpleType name="HMACOutputLengthType">
381 <restriction base="integer"/>
384 <!-- Start KeyValue Element-types -->
386 <element name="DSAKeyValue" type="ds:DSAKeyValueType"/>
387 <complexType name="DSAKeyValueType">
389 <sequence minOccurs="0">
390 <element name="P" type="ds:CryptoBinary"/>
391 <element name="Q" type="ds:CryptoBinary"/>
393 <element name="G" type="ds:CryptoBinary" minOccurs="0"/>
394 <element name="Y" type="ds:CryptoBinary"/>
395 <element name="J" type="ds:CryptoBinary" minOccurs="0"/>
396 <sequence minOccurs="0">
397 <element name="Seed" type="ds:CryptoBinary"/>
398 <element name="PgenCounter" type="ds:CryptoBinary"/>
403 <element name="RSAKeyValue" type="ds:RSAKeyValueType"/>
404 <complexType name="RSAKeyValueType">
406 <element name="Modulus" type="ds:CryptoBinary"/>
407 <element name="Exponent" type="ds:CryptoBinary"/>
411 <!-- End KeyValue Element-types -->
413 <!-- End Signature -->