XML Security Implementations

A curated list of XML Signature, XML Encryption, SAML and other XML Security related libraries and projects

Language-specific

Python

• https://github.com/kislyuk/signxml
• https://github.com/onelogin/python-saml

Ruby

• https://github.com/benoist/xmldsig
• https://github.com/onelogin/ruby-saml

PHP

• https://github.com/robrichards/xmlseclibs
• https://github.com/onelogin/php-saml

Java

• http://santuario.apache.org/ (https://github.com/apache/santuario-java)
• https://github.com/onelogin/java-saml

C/C++

• https://www.aleksey.com/xmlsec/ (https://github.com/lsh123/xmlsec)

Standards and related documents

• List of W3C XML Signature standards and drafts
• W3C Working Group Note: XML Security 2.0 Requirements and Design Considerations

XML Signature

• W3C Recommendation: XML Signature Syntax and Processing (Second Edition)
• W3C Recommendation: XML Signature Syntax and Processing Version 1.1
• W3C Working Group Note: XML Signature Syntax and Processing Version 2.0
• W3C Working Group Note: XML Signature Best Practices
• XML-Signature Interoperability
• W3C Working Group Note: Test Cases for C14N 1.1 and XMLDSig Interoperability

XML Encryption

• W3C Recommendation: XML Encryption Syntax and Processing Version 1.1
• W3C Working Group Note: Test cases for XML Encryption 1.1

Other resources

• XMLSec: Related links
• OWASP SAML Security Cheat Sheet