Decryption and Validate Signature

[vyal2k]

Hi,
 I would like to confirm the order of decryption and signature validation (at SP side) for the following:
1) For Signed & Encrypted Assertion: First decrypt and then validate signature.
2) For Signed & Encrypted NameID or Attribute: Validate signature and then decrypt.

Thanks,
Vasu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131210/e0e339d6/attachment-0001.html