XML Security Implementations

A curated list of XML Signature, XML Encryption, SAML and other XML Security related libraries and projects

Language-specific

Python

• https://github.com/kislyuk/signxml
• https://github.com/onelogin/python-saml

Ruby

• https://github.com/benoist/xmldsig
• https://github.com/onelogin/ruby-saml

Javascript

• https://github.com/yaronn/xml-crypto
• https://github.com/Clever/saml2
• https://github.com/auth0/node-xml-encryption

PHP

• https://github.com/robrichards/xmlseclibs
• https://github.com/onelogin/php-saml
• https://github.com/simplesamlphp/xml-security
• https://github.com/simplesamlphp/saml2

Java

• http://santuario.apache.org/ (https://github.com/apache/santuario-java)
• https://github.com/onelogin/java-saml

C/C++

• https://www.aleksey.com/xmlsec/ (https://github.com/lsh123/xmlsec)

Go

• https://github.com/russellhaering/goxmldsig
• https://github.com/russellhaering/gosaml2

Standards and related documents

• List of W3C XML Signature standards and drafts
• W3C Working Group Note: XML Security 2.0 Requirements and Design Considerations

XML Signature

• W3C Recommendation: XML Signature Syntax and Processing (Second Edition)
• W3C Recommendation: XML Signature Syntax and Processing Version 1.1
• W3C Working Group Note: XML Signature Syntax and Processing Version 2.0
• W3C Working Group Note: XML Signature Best Practices
• XML-Signature Interoperability
• W3C Working Group Note: Test Cases for C14N 1.1 and XMLDSig Interoperability
• W3C Working Group Note: XML Advanced Electronic Signatures (XAdES)

XML Encryption

• W3C Recommendation: XML Encryption Syntax and Processing Version 1.1
• W3C Working Group Note: Test cases for XML Encryption 1.1

SAML

• SAML Wiki (includes SAML standard specification)
• Okta SAML documentation
• OWASP SAML Security Cheat Sheet

Other resources

• XMLSec: Related links
• European Union: eSignature Documentation