Share via

2.2.2.8 GuardianSignature

  • Article

The GuardianSignature structure denotes the digital signature using the KPS signing certificate specified by WrappingId over the entire Wrappings element.

 <xs:element name="GuardianSignature" type="GuardianSignature_T" />
   <xs:complexType name="GuardianSignature_T">
      <xs:annotation>
         <xs:documentation>The guardian signature is computed using the signing certificate specified by WrappingId over the entire Wrappings element after exclusive xml canonicalization (http://www.w3.org/2001/10/xml-exc-c14n#) and conversion to UTF-8.</xs:documentation>
      </xs:annotation>
      <xs:sequence>
         <xs:element name="Signature" type="Signature_T" />
      </xs:sequence>
      <xs:attribute name="WrappingId" type="xs:unsignedInt" use="required" />
  </xs:complexType>

Signature: The guardian signature is computed by using the KPS signing certificate’s private key of the type defined in section 2.2.2.10.

WrappingId: A 32-bit unsigned integer that contains a unique wrapping ID.