PROTOCOL: Symmetric Key Services (SKS) response with a symmetric key

A successful response to a symmetric key request (without the WSS overlay) resembles the following:


<xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:symkey="http://www.strongauth.com/2006/01/symkey#">



<ds:KeyInfo>




<ds:KeyName>2-2</ds:KeyName>



</ds:KeyInfo>

<xenc:CipherData>




<xenc:CipherValue>CKd4hXZkFGXagTaSPXfOzGgmRVQDik377GZ8hbXfL/XxyzynxGRCS1QUusbgSBqXqjq8goRLcb6l

rDtyM+q3MeWIv0/BAoZyUJrGGflSJ7OqVwH1vClmhrMfqPmPTWlvBznsPJeG9ICb/kPNFQEFyn8Y

8pRnbgc38XkMl7uPWAo=</xenc:CipherValue>



</xenc:CipherData>

<xenc:EncryptionProperties>




<xenc:EncryptionProperty>





<symkey:KeyUsePolicy>






<symkey:pid>4</symkey:pid>

<symkey:name>DES-EDE KeyUsePolicy</symkey:name>

<symkey:start_date>1969-12-31 16:00:00.0</symkey:start_date>

<symkey:end_date>1969-12-31 16:00:00.0</symkey:end_date>

<symkey:duration>0</symkey:duration>

<symkey:tx_allowed>10</symkey:tx_allowed>

<symkey:policy_type>Tx</symkey:policy_type>

<symkey:algorithm>http://www.w3.org/2001/04/xmlenc#tripledes-cbc</symkey:algorithm>

<symkey:keysize>192</symkey:keysize>

<symkey:status>Active</symkey:status>





</symkey:KeyUsePolicy>




</xenc:EncryptionProperty>



</xenc:EncryptionProperties>


</xenc:EncryptedKey>







The same response when wrapped within the OASIS WSS protocol:



<?xml version="1.0" encoding="UTF-8"?>

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">

<SOAP-ENV:Header>

<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" SOAP-ENV:mustUnderstand="1">

<wsse:BinarySecurityToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" wsu:Id="XWSSGID-1154633913199-187277365">MIIEJTCCAw2gAwIBAgIIK8YzLjBJ0qswDQYJKoZIhvcNAQELBQAwZzEmMCQGA1UEAxMdU3Ryb25n

S2V5IERFTU8gU3Vib3JkaW5hdGUgQ0ExJDAiBgNVBAsTG0ZvciBTdHJvbmdLZXkgREVNTyBVc2Ug

T25seTEXMBUGA1UEChMOU3Ryb25nQXV0aCBJbmMwHhcNMDYwNzI1MTYzODE4WhcNMDcwNzI1MTY0

ODE4WjBqMRIwEAYKCZImiZPyLGQBARMCMTAxFTATBgNVBAMTDFNLUyBTZXJ2ZXItMjEkMCIGA1UE

CxMbRm9yIFN0cm9uZ0tleSBERU1PIFVzZSBPbmx5MRcwFQYDVQQKEw5TdHJvbmdBdXRoIEluYzCC

ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ2Kge/hQG7b7Tv7vWzt+phYWQxGsurJ0fUM

ILXJ+BfY7INZ7g9K9ZuqjE62Vds6odX2C91Wk0vIPeeyl10EQ6u2LsYi0qswlydrW4Qbt6zR8376

NuQdhGtyNsboeG7UDzFDJDIu8NxO6tE72t5nFdtTIbM6O11mZ43KZxhUizst8qGR1cpnU7bhTuRm

Ud737tLvowe4ubYRk8n/9DDTG1MR3BhKD9ylqW7j1+9nAG9JUshIbNoZZ6Z0aCxp7QvpiOjLnkIq

znwq50gWEyZYJSVu5W++XCORIIGjEiRJqHKblwjHF3HXCGQqIuzGnFf275sOi9qO3ALtNpS75li4

bF0CAwEAAaOB0TCBzjAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0OBBYEFB7F74j+RVORjhNyCeaLcGpR

GhFiMB8GA1UdIwQYMBaAFPTYwEHoJG4iFVHRnt2EWxGluAQVMCYGA1UdEQQfMB2BG3NlcnZlci5h

ZG1pbkBzdHJvbmdhdXRoLmNvbTAYBgNVHSAEETAPMA0GCysGBAHSEoN9AQQBMDoGA1UdHwQzMDEw

L6AtoCuGKWh0dHA6Ly9kZW1vLnN0cm9uZ2tleS5vcmcvZGVtby1zdWItY2EuY3JsMA0GCSqGSIb3

DQEBCwUAA4IBAQAkhGJr1wg/Qt6JKnxvWKK/0fOlguSRRQl1in37MTtnqot7H8ahkaDP2sVXNW1V

LrEeXyNfHE4vTAoP5VIiT8nXlsvdujqRAsY0gigJ5VJ/D990DBqKN2kotvZMvbAY4mcDdU+TaX4z

k/oetZqrAYX7Szs3NUgxopd8K+GzdR+b1FzlAhvf39zqrCjEGYjJyxfPQruWKPmdvRO1ccIxvQlG

kMP9nDOKbnRNTmS1ZOJqktytFAjAlfEVoaV5/mACOZOYKpUJsOHm+TwSyR9373kMjIWh8oCpiFYf

2kQKk66f86UazwChKnDQn1THnFFBukr6VRw50AaIaXVTauCM+R1X</wsse:BinarySecurityToken>

<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">

<ds:SignedInfo>

<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">

<InclusiveNamespaces xmlns="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="wsse SOAP-ENV"/>

</ds:CanonicalizationMethod>

<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>

<ds:Reference URI="#XWSSGID-1154633932515-1329561154">

<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>

<ds:DigestValue>oO8dmj3ncj7qmPo/qAX769gF2AM=</ds:DigestValue>

</ds:Reference>

<ds:Reference URI="#XWSSGID-1154633932515550194145">

<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>

<ds:DigestValue>8azioIE1pIHmncKSYOvnjlLpWw8=</ds:DigestValue>

</ds:Reference>

</ds:SignedInfo>

<ds:SignatureValue>OAKCtdomOdhwyLpUhVn+xi3ZG4IIf3VagV1/rMBkTIVxNbHQ5HrMRDst5wbk7BhbM+BYPbErAFdy

3bB3hFL208Kxs0wtv/J5T+HlOJG7uUBPQRVTJCmHrEiW1VfKxEaOmocBoXOnAM/eNd7Ge0jXPZ2I

qOmWKKM4i9yoaPcvY8bZljKTaaALW+Amg6+H1jC+27fMBcfQvi7HurtUKX0m3eda6Bwxk6yaMIZx

nogeITw9ytDnYXGMz7YwNOBOt3eP4PzWq98ApdcsK1XzsD6JsigHJZ9sd7SHP2PyLg9606Z4PQ6O

PbQ3nVtWURkkwOF4batbRgJz0/iurJx0+YH4WA==</ds:SignatureValue>

<ds:KeyInfo>

<wsse:SecurityTokenReference xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="XWSSGID-1154633932510-1780208888">

<wsse:Reference URI="#XWSSGID-1154633913199-187277365" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/>

</wsse:SecurityTokenReference>

</ds:KeyInfo>

</ds:Signature>

<wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="XWSSGID-1154633932515550194145">

<wsu:Created>2006-08-03T19:38:52Z</wsu:Created>

<wsu:Expires>2006-09-02T19:38:52Z</wsu:Expires>

</wsu:Timestamp>

</wsse:Security>

</SOAP-ENV:Header>

<SOAP-ENV:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="XWSSGID-1154633932515-1329561154">

<xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:symkey="http://www.strongauth.com/2006/01/symkey#">

<ds:KeyInfo>

<ds:KeyName>2-2</ds:KeyName>

</ds:KeyInfo>

<xenc:CipherData>

<xenc:CipherValue>CKd4hXZkFGXagTaSPXfOzGgmRVQDik377GZ8hbXfL/XxyzynxGRCS1QUusbgSBqXqjq8goRLcb6l

rDtyM+q3MeWIv0/BAoZyUJrGGflSJ7OqVwH1vClmhrMfqPmPTWlvBznsPJeG9ICb/kPNFQEFyn8Y

8pRnbgc38XkMl7uPWAo=</xenc:CipherValue>

</xenc:CipherData>

<xenc:EncryptionProperties>

<xenc:EncryptionProperty>

<symkey:KeyUsePolicy>

<symkey:pid>4</symkey:pid>

<symkey:name>DES-EDE KeyUsePolicy</symkey:name>

<symkey:start_date>1969-12-31 16:00:00.0</symkey:start_date>

<symkey:end_date>1969-12-31 16:00:00.0</symkey:end_date>

<symkey:duration>0</symkey:duration>

<symkey:tx_allowed>10</symkey:tx_allowed>

<symkey:policy_type>Tx</symkey:policy_type>

<symkey:algorithm>http://www.w3.org/2001/04/xmlenc#tripledes-cbc</symkey:algorithm>

<symkey:keysize>192</symkey:keysize>

<symkey:status>Active</symkey:status>

</symkey:KeyUsePolicy>

</xenc:EncryptionProperty>

</xenc:EncryptionProperties>

</xenc:EncryptedKey>

</SOAP-ENV:Body>

</SOAP-ENV:Envelope>