OpenSAML: Verify Signature after decryption

[Nicolas Peifer]

Cantor, Scott wrote:
> What kind of extension is encrypted? 
It is a custom SAMLObject. But I guess you want to know whether if it is an 
assertion or something else (like described in saml2 core, section "6.2 
Combining Signatures and Encryption"). I'm sorry but I cannot define the type 
more precisely.

> A signature over the AuthnRequest
> would also not verify if you replace the encrypted content with the
> plaintext. The signature has to be over the final form of the request.
Thank you for this hint.

Brent Putman wrote:
> Yeah, as Scott already noted, that is the wrong order of operations.  I
> believe the SAML core spec discusses this specifically.  For the example
> of this particular case, you would first validate the protocol message
> signature, and then decrypt its content (e.g. your request extension, a
> response's EncryptedAssertion).
Ok, then I misunderstood everything. Yes, in the saml2 core pdf you can find a 
section "6.2 Combining Signatures and Encryption". But I simply chose the 
wrong operation order.

> since the decryption process does *not* replace the decrypted
> element with unencrypted one (see below).
Alright, this is my next misunderstanding. I guess I have to work more on 
english skills ;-)

The rest of your detailed description helps me, too and makes everything very 
clear so that I have no further question.

Thank you Scott and Brent for your quick and helpful replys.

Regards
Nicolas