...
- Apache XML Security for Java: This library includes the standard JSR-105 (Java XML Digital Signature) API, a mature DOM-based implementation of both XML Signature and XML Encryption, as well as a more recent StAX-based (streaming) XML Signature and XML Encryption implementation.
- Apache XML Security for C++: This library includes a mature Digital Signature and Encryption implementation using a proprietary C++ API on top of the Xerces-C XML Parser's DOM API. It includes a pluggable cryptographic layer, but support for alternatives to OpenSSL are less complete and less mature.
News
November 2020
Version 2.2.1 and 2.1.6 of the Apache XML Security for Java library have been released to fix a few bugs.
Please see the release notes for more information.
June 2020
Version 2.2.0 of the Apache XML Security for Java library has been released. This is a new major release with the following features:
...
This release includes a fix for CVE-2020-2773 which also affects our code base. However we will not be issuing a separate CVE, as we do not consider it a security vulnerability.
Please see the release notes for more information.
March 2020
Version 2.1.5 of the Apache XML Security for Java library has been released.
Please see the release notes for more information.
...
