Decryption and Validate Signature

[Cantor, Scott]

On 12/10/13, 11:21 AM, "vyal2k" <vyal2k at yahoo.com> wrote:

>Hi,
> I would like to confirm the order of decryption and signature validation
>(at SP side) for the following:
>1) For Signed & Encrypted Assertion: First decrypt and then validate
>signature.
>2) For Signed & Encrypted NameID or Attribute: Validate signature and
>then decrypt.

That's physically the only order that's possible.

-- Scott