UAFX OfflineEngineering - Annex I (informative) Example Digital Signature

Annex I (informative) Example Digital Signature

I.1 Example of Digital Signature with separate certificate

<?xml version=“1.0” encoding=“utf-8” standalone=“yes”?>

<Signature Id=“SignatureIdValue” xmlns=“http://www.w3.org/2000/09/xmldsig#”>

<SignedInfo>

<CanonicalizationMethod Algorithm=“http://www.w3.org/TR/2001/REC-xml-c14n-

20010315”/>

<SignatureMethod Algorithm=“http://www.w3.org/2001/04/xmldsig-more#rsa-

sha256”/>

<Reference URI=“#idPackageObject” Type=“http://www.w3.org/2000/09/xmldsig#Object”>

<DigestMethod Algorithm=“http://www.w3.org/2001/04/xmlenc#sha256”/>

<DigestValue>…</DigestValue>

</Reference>

</SignedInfo>

<SignatureValue>…</SignatureValue>

<Object Id=“idPackageObject”>

<Manifest xmlns:opc=“http://schemas.openxmlformats.org/package/2006/digital-

signature”>

<Reference URI=“/CAEX_ClassModel_V.3.0.xsd?ContentType=text/xml”>

<DigestMethod Algorithm=“http://www.w3.org/2001/04/xmlenc#sha256”/>

<DigestValue>…</DigestValue>

</Reference>

<Reference URI=“/MyDescriptor2.aml?ContentType= application/automationml-aml+xml”>

<DigestMethod Algorithm=“http://www.w3.org/2001/04/xmlenc#sha256”/>

<DigestValue>…</DigestValue>

</Reference>

<Reference URI=“/_rels/.rels?ContentType=application/vnd.openxmlformats-

package.relationships+xml”>

<Transforms>

<Transform Algorithm=“http://www.w3.org/TR/2001/REC-xml-c14n-

20010315”/>

</Transforms>

<DigestMethod Algorithm=“http://www.w3.org/2001/04/xmlenc#sha256”/>

<DigestValue>…</DigestValue>

</Reference>

</Manifest>

<SignatureProperties>

<SignatureProperty Id=“idSignatureTime” Target=“#SignatureIdValue”>

<SignatureTime xmlns=“http://schemas.openxmlformats.org/package/2006/digital-signature”>

<Format>YYYY-MM-DDThh:mm:ss.sTZD</Format>

<Value>2022-02-10T14:40:52.5+01:00</Value>

</SignatureTime>

</SignatureProperty>

</SignatureProperties>

</Object>

</Signature>

I.2 Example of Digital Signature with embedded certificate

<?xml version=“1.0” encoding=“utf-8” standalone=“yes”?>

<Signature Id=“SignatureIdValue” xmlns=“http://www.w3.org/2000/09/xmldsig#”>

<SignedInfo>

<CanonicalizationMethod Algorithm=“http://www.w3.org/TR/2001/REC-xml-c14n-

20010315”/>

<SignatureMethod Algorithm=“http://www.w3.org/2001/04/xmldsig-more#rsa-

sha256”/>

<Reference URI=“#idPackageObject” Type=“http://www.w3.org/2000/09/xmldsig#Object”>

<DigestMethod Algorithm=“http://www.w3.org/2001/04/xmlenc#sha256”/>

<DigestValue>…</DigestValue>

</Reference>

</SignedInfo>

<SignatureValue>…</SignatureValue>

<KeyInfo>

<X509Data>

<X509Certificate>…</X509Certificate>

</X509Data>

</KeyInfo>

<Object Id=“idPackageObject”>

<Manifest xmlns:opc=“http://schemas.openxmlformats.org/package/2006/digital-

signature”>

<Reference URI=“/CAEX_ClassModel_V.3.0.xsd?ContentType=text/xml”>

<DigestMethod Algorithm=“http://www.w3.org/2001/04/xmlenc#sha256”/>

<DigestValue>…</DigestValue>

</Reference>

<Reference URI=“/MyDescriptor2.aml?ContentType= application/automationml-aml+xml”>

<DigestMethod Algorithm=“http://www.w3.org/2001/04/xmlenc#sha256”/>

<DigestValue>…</DigestValue>

</Reference>

<Reference URI=“/_rels/.rels?ContentType=application/vnd.openxmlformats-

package.relationships+xml”>

<Transforms>

<Transform Algorithm=“http://www.w3.org/TR/2001/REC-xml-c14n-

20010315”/>

</Transforms>

<DigestMethod Algorithm=“http://www.w3.org/2001/04/xmlenc#sha256”/>

<DigestValue>…</DigestValue>

</Reference>

</Manifest>

<SignatureProperties>

<SignatureProperty Id=“idSignatureTime” Target=“#SignatureIdValue”>

<SignatureTime xmlns=“http://schemas.openxmlformats.org/package/2006/digital-signature”>

<Format>YYYY-MM-DDThh:mm:ss.sTZD</Format>

<Value>2022-02-10T14:36:33.4+01:00</Value>

</SignatureTime>

</SignatureProperty>

</SignatureProperties>

</Object>

</Signature>

I.3 Example of 2nd Digital Signature with embedded certificate

<?xml version="1.0" encoding="utf-8" standalone="yes"?>

<Signature Id="SignatureIdValue"

xmlns="http://www.w3.org/2000/09/xmldsig#">

<SignedInfo>

<CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />

<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />

<Reference URI="#idPackageObject" Type="http://www.w3.org/2000/09/xmldsig#Object">

<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />

<DigestValue>…</DigestValue>

</Reference>

</SignedInfo>

<SignatureValue>…</SignatureValue>

<KeyInfo>

<X509Data>

<X509Certificate>…</X509Certificate>

</X509Data>

</KeyInfo>

<Object Id="idPackageObject">

<Manifest xmlns:opc="http://schemas.openxmlformats.org/package/2006/digital-signature">

<Reference URI="/CAEX_ClassModel_V.3.0.xsd?ContentType=text/xml">

<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />

<DigestValue>…</DigestValue>

</Reference>

<Reference URI="/manifest.xml?ContentType=text/xml">

<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />

<DigestValue>…</DigestValue>

</Reference>

<Reference URI="/MyDescriptor.aml?ContentType=application/automationml-aml+xml">

<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />

<DigestValue>…</DigestValue>

</Reference>

<Reference URI="/package/services/digital-signature/origin.psdsor?ContentType=application/vnd.openxmlformats-package.digital-signature-origin">

<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />

<DigestValue>…</DigestValue>

</Reference>

<Reference URI="/package/services/digital-signature/xml-signature/761bce75914e4d8484fb8f83389b674f.psdsxs?ContentType=application/vnd.openxmlformats-package.digital-signature-xmlsignature+xml">

<Transforms>

<Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />

</Transforms>

<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />

<DigestValue>…</DigestValue>

</Reference>

<Reference URI="/_rels/.rels?ContentType=application/vnd.openxmlformats-package.relationships+xml">

<Transforms>

<Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />

</Transforms>

<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />

<DigestValue>…</DigestValue>

</Reference>

</Manifest>

<SignatureProperties>

<SignatureProperty Id="idSignatureTime" Target="#SignatureIdValue">

<SignatureTime xmlns="http://schemas.openxmlformats.org/package/2006/digital-signature">

<Format>YYYY-MM-DDThh:mm:ss.sTZD</Format>

<Value>2023-08-14T10:37:10.2+02:00</Value>

</SignatureTime>

</SignatureProperty>

</SignatureProperties>

</Object>

</Signature>