Changes

|Return message authentication code (MAC) for a given string:

'''Query:'''

crypto:hmac('message', 'secretkey', 'md5', 'hex')

'''Result:'''

34D1E3818B347252A75A4F6D747B21C2

|}

| '''Example'''

|Encrypt input data:

crypto:encrypt('message', 'symmetric', 'keykeyke', 'DES')

|}

|Decrypt input data and return original string:

'''Query:'''

let $encrypted := crypto:encrypt('message', 'symmetric', 'keykeyke', 'DES')

return crypto:decrypt($encrypted, 'symmetric', 'keykeyke', 'DES')

'''Result:'''

message

|}

'''XML Signature'''

<Signature>

<SignedInfo>

<Object/>

</Signature>

* '''SignedInfo''' contains or references the signed data and lists algorithm information

The {{Code|generate-signature}} function allows to pass a {{Code|digital certificate}}. This certificate holds parameters that allow to access key information stored in a Java key store which is then used to sign the input document. Passing a {{Code|digital certificate}} simply helps re-using the same key pair to sign and validate data. The {{Code|digital certificate}} is passed as a node and has the following form:

<digital-certificate>

<keystore-type>JKS</keystore-type>

<keystore-uri>...</keystore-uri>

</digital-certificate>

==crypto:generate-signature==

'''Query:'''

crypto:generate-signature(<a/>, '', '', '', '', '')

'''Result:'''

<a>

<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">

</Signature>

</a>

|}

'''Query:'''

let $sig := crypto:generate-signature(<a/>, '', '', '', '', '')

return crypto:validate-signature($sig)

'''Result:'''

true

|}