Collected research

A Taxonomy of Attacks against XML Digital Signatures & Encryption

Brad Hill · Black Hat USA

Organizes attacks against XML signatures and encryption by processing stage, including key trust, canonicalization, reference resolution and signature verification. Examples connect wrapping, transforms and execution order to application behavior, with timing probes and mitigations for the exposed processing paths.

Record

Researcher

Brad Hill

Published by

Black Hat USA

Format

Whitepaper

Topic

Crypto

In the archive

• Collected in the 2007 research round

Tags

• crypto
• parser-differential
• auth-bypass
• timing-attack
• dos
• rce
• owasp-a01-2021
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of Brad Hill, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 13 September 2026.