<?xml version="1.0"?>
<!--
<!DOCTYPE Configuration SYSTEM "config.dtd">
-->
<!-- This configuration file is used for configuration of the org.apache.xml.security package -->
<Configuration target="org.apache.xml.security" xmlns="http://www.xmlsecurity.org/NS/#configuration">
   <CanonicalizationMethods>
      <CanonicalizationMethod URI="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"
                              JAVACLASS="org.apache.xml.security.c14n.implementations.Canonicalizer20010315OmitComments" />
      <CanonicalizationMethod URI="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"
                              JAVACLASS="org.apache.xml.security.c14n.implementations.Canonicalizer20010315WithComments" />

      <CanonicalizationMethod URI="http://www.w3.org/2001/10/xml-exc-c14n#"
                              JAVACLASS="org.apache.xml.security.c14n.implementations.Canonicalizer20010315ExclOmitComments"/>
      <CanonicalizationMethod URI="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"
                              JAVACLASS="org.apache.xml.security.c14n.implementations.Canonicalizer20010315ExclWithComments"/>
   </CanonicalizationMethods>
   <TransformAlgorithms>
      <!-- Base64 -->
      <TransformAlgorithm URI="http://www.w3.org/2000/09/xmldsig#base64"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformBase64Decode" />
      <!-- c14n omitting comments -->
      <TransformAlgorithm URI="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformC14N" />
      <!-- c14n with comments -->
      <TransformAlgorithm URI="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformC14NWithComments" />
      <!-- exclusive c14n omitting comments -->
      <TransformAlgorithm URI="http://www.w3.org/2001/10/xml-exc-c14n#"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformC14NExclusive" />
      <!-- exclusive c14n with comments -->
      <TransformAlgorithm URI="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformC14NExclusiveWithComments" />

      <!-- XPath transform -->
      <TransformAlgorithm URI="http://www.w3.org/TR/1999/REC-xpath-19991116"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformXPath" />
      <!-- enveloped signature -->
      <TransformAlgorithm URI="http://www.w3.org/2000/09/xmldsig#enveloped-signature"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformEnvelopedSignature" />
      <!-- XSLT -->
      <TransformAlgorithm URI="http://www.w3.org/TR/1999/REC-xslt-19991116"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformXSLT" />
      <!-- XPath version 2 -->
      <TransformAlgorithm URI="http://www.w3.org/2002/04/xmldsig-filter2"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformXPath2Filter04" />
      <!-- XPath version 2b -->
      <TransformAlgorithm URI="http://www.w3.org/2002/06/xmldsig-filter2"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformXPath2Filter" />
      <!-- Christian Geuer-Pollmanns approach for XPath 2; experimantal -->
      <TransformAlgorithm URI="http://www.nue.et-inf.uni-siegen.de/~geuer-pollmann/#xpathFilter"
                          JAVACLASS="org.apache.xml.security.transforms.implementations.TransformXPathFilterCHGP" />
   </TransformAlgorithms>
   <SignatureAlgorithms>
      <SignatureAlgorithm URI="http://www.w3.org/2000/09/xmldsig#dsa-sha1"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.SignatureDSA" />
      <SignatureAlgorithm URI="http://www.w3.org/2000/09/xmldsig#rsa-sha1"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.SignatureBaseRSA$SignatureRSASHA1" />
      <SignatureAlgorithm URI="http://www.w3.org/2000/09/xmldsig#hmac-sha1"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.IntegrityHmac$IntegrityHmacSHA1" />

      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-md5"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.SignatureBaseRSA$SignatureRSAMD5" />
      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.SignatureBaseRSA$SignatureRSARIPEMD160" />
      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.SignatureBaseRSA$SignatureRSASHA256" />
      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.SignatureBaseRSA$SignatureRSASHA384" />
      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.SignatureBaseRSA$SignatureRSASHA512" />

      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-md5"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.IntegrityHmac$IntegrityHmacMD5" />
      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.IntegrityHmac$IntegrityHmacRIPEMD160" />
      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.IntegrityHmac$IntegrityHmacSHA256" />
      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-sha384"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.IntegrityHmac$IntegrityHmacSHA384" />
      <SignatureAlgorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-sha512"
                          JAVACLASS="org.apache.xml.security.algorithms.implementations.IntegrityHmac$IntegrityHmacSHA512" />
   </SignatureAlgorithms>
   <JCEAlgorithmMappings>
      <!-- Here, individual providers can be registered; each provider
           is identified by Id which is referenced by ProviderId of the
           Provider Element in the Algorithm Element -->
      <Providers>
         <Provider Id="BC"
                   Class="org.bouncycastle.jce.provider.BouncyCastleProvider"
                   Info="BouncyCastle Security Provider v1.09"
                   ProviderURL="http://www.bouncycastle.org/" />
         <Provider Id="SUN"
                   Class="sun.security.provider.Sun"
                   Info="SUN (DSA key/parameter generation; DSA signing; SHA-1, MD5 digests; SecureRandom; X.509 certificates; JKS keystore)"
                   ProviderURL="http://java.sun.com/" />
         <Provider Id="SunRsaSign"
                   Class="com.sun.rsajca.Provider"
                   Info="SUN's provider for RSA signatures"
                   ProviderURL="http://java.sun.com/" />
         <Provider Id="SunJCE"
                   Class="com.sun.crypto.provider.SunJCE"
                   Info="SunJCE Provider (implements DES, Triple DES, Blowfish, PBE, Diffie-Hellman, HMAC-MD5, HMAC-SHA1)"
                   ProviderURL="http://java.sun.com/" />
         <Provider Id="IAIK"
                   Class="iaik.security.provider.IAIK"
                   Info="IAIK Security Provider v2.6"
                   ProviderURL="http://www.iaik.at/" />
         <Provider Id="Cryptix"
                   Class="cryptix.provider.Cryptix"
                   Info="Cryptix JCE provider v3.001002"
                   ProviderURL="http://www.cryptix.org//" />
      </Providers>
      <Algorithms>
         <!-- MessageDigest Algorithms -->
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#md5"
                    Description="MD5 message digest from RFC 1321"
                    AlgorithmClass="MessageDigest"
                    RequirementLevel="NOT RECOMMENDED"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="MD5" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#ripemd160"
                    Description="RIPEMD-160 message digest"
                    AlgorithmClass="MessageDigest"
                    RequirementLevel="OPTIONAL">
            <ProviderAlgo ProviderId="BC"
                          JCEName="RIPEMD160" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="RIPEMD160" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2000/09/xmldsig#sha1"
                    Description="SHA-1 message digest"
                    AlgorithmClass="MessageDigest"
                    RequirementLevel="REQUIRED">
            <ProviderAlgo ProviderId="BC"
                          JCEName="SHA-1" />
            <ProviderAlgo ProviderId="SUN"
                          JCEName="SHA-1" />
            <ProviderAlgo ProviderId="IAIK"
                          JCEName="SHA-1" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="SHA-1" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#sha256"
                    Description="SHA-1 message digest with 256 bit"
                    AlgorithmClass="MessageDigest"
                    RequirementLevel="RECOMMENDED">
            <ProviderAlgo ProviderId="BC"
                          JCEName="SHA-256" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#sha384"
                    Description="SHA message digest with 384 bit"
                    AlgorithmClass="MessageDigest"
                    RequirementLevel="OPTIONAL"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="SHA-384" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#sha512"
                    Description="SHA-1 message digest with 512 bit"
                    AlgorithmClass="MessageDigest"
                    RequirementLevel="OPTIONAL">
            <ProviderAlgo ProviderId="BC"
                          JCEName="SHA-512" />
         </Algorithm>

         <!-- Signature Algorithms -->
         <Algorithm URI="http://www.w3.org/2000/09/xmldsig#dsa-sha1"
                    Description="Digital Signature Algorithm with SHA-1 message digest"
                    AlgorithmClass="Signature"
                    RequirementLevel="REQUIRED">
            <ProviderAlgo ProviderId="BC"
                          JCEName="DSA" />
            <ProviderAlgo ProviderId="SUN"
                          JCEName="DSAWithSHA1" />
            <ProviderAlgo ProviderId="IAIK"
                          JCEName="DSA" />
         </Algorithm>

         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-md5"
                    Description="RSA Signature with MD5 message digest"
                    AlgorithmClass="Signature"
                    RequirementLevel="NOT RECOMMENDED"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="MD5WithRSAEncryption" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160"
                    Description="RSA Signature with RIPEMD-160 message digest"
                    AlgorithmClass="Signature"
                    RequirementLevel="OPTIONAL"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="RIPEMD160WithRSAEncryption" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2000/09/xmldsig#rsa-sha1"
                    Description="RSA Signature with SHA-1 message digest"
                    AlgorithmClass="Signature"
                    RequirementLevel="RECOMMENDED">
            <ProviderAlgo ProviderId="BC"
                          JCEName="SHA1WithRSAEncryption" />
            <ProviderAlgo ProviderId="SunRsaSign"
                          JCEName="SHA1withRSA" />
            <ProviderAlgo ProviderId="IAIK"
                          JCEName="SHA-1/RSA" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="SHA-1/RSA" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"
                    Description="RSA Signature with SHA-256 message digest"
                    AlgorithmClass="Signature"
                    RequirementLevel="OPTIONAL"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="SHA256withRSAEncryption" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"
                    Description="RSA Signature with SHA-384 message digest"
                    AlgorithmClass="Signature"
                    RequirementLevel="OPTIONAL"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="SHA384withRSAEncryption" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"
                    Description="RSA Signature with SHA-512 message digest"
                    AlgorithmClass="Signature"
                    RequirementLevel="OPTIONAL"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="SHA512withRSAEncryption" />
         </Algorithm>

         <!-- MAC Algorithms -->
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-md5"
                    Description="Message Authentication code using MD5"
                    AlgorithmClass="Mac"
                    RequirementLevel="NOT RECOMMENDED"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="HMACMD5" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160"
                    Description="Message Authentication code using RIPEMD-160"
                    AlgorithmClass="Mac"
                    RequirementLevel="OPTIONAL"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="HMACRIPEMD160" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2000/09/xmldsig#hmac-sha1"
                    Description="Message Authentication code using SHA1"
                    AlgorithmClass="Mac"
                    RequirementLevel="REQUIRED">
            <ProviderAlgo ProviderId="BC"
                          JCEName="HMACSHA1" />
            <ProviderAlgo ProviderId="SunJCE"
                          JCEName="HmacSHA1" />
            <ProviderAlgo ProviderId="IAIK"
                          JCEName="HMAC/SHA" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="HMAC-SHA-1" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"
                    Description="Message Authentication code using SHA-256"
                    AlgorithmClass="Mac"
                    RequirementLevel="OPTIONAL"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="HMACSHA256" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-sha384"
                    Description="Message Authentication code using SHA-384"
                    AlgorithmClass="Mac"
                    RequirementLevel="OPTIONAL"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="HMACSHA384" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmldsig-more#hmac-sha512"
                    Description="Message Authentication code using SHA-512"
                    AlgorithmClass="Mac"
                    RequirementLevel="OPTIONAL"
                    SpecificationURL="http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt">
            <ProviderAlgo ProviderId="BC"
                          JCEName="HMACSHA512" />
         </Algorithm>

         <!-- Block encryption Algorithms -->
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"
                    Description="Block encryption using Triple-DES"
                    AlgorithmClass="BlockEncryption"
                    RequirementLevel="REQUIRED"
                    KeyLength="192">
            <ProviderAlgo ProviderId="BC"
                          RequiredKey="DESEDE"
                          JCEName="DESEDE/CBC/ISO10126PADDING"
                          IVJCEName="DESEDE/ECB/NOPADDING" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="DES-EDE3/CBC" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#aes128-cbc"
                    Description="Block encryption using AES with a key length of 128 bit"
                    AlgorithmClass="BlockEncryption"
                    RequirementLevel="REQUIRED"
                    KeyLength="128">
            <ProviderAlgo ProviderId="BC"
                          RequiredKey="AES"
                          JCEName="AES/CBC/ISO10126PADDING"
                          IVJCEName="AES/ECB/NOPADDING" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="Rijndael" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#aes192-cbc"
                    Description="Block encryption using AES with a key length of 192 bit"
                    AlgorithmClass="BlockEncryption"
                    RequirementLevel="OPTIONAL"
                    KeyLength="192">
            <ProviderAlgo ProviderId="BC"
                          RequiredKey="AES"
                          JCEName="AES/CBC/ISO10126PADDING"
                          IVJCEName="AES/ECB/NOPADDING" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="Rijndael" />
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#aes256-cbc"
                    Description="Block encryption using AES with a key length of 256 bit"
                    AlgorithmClass="BlockEncryption"
                    RequirementLevel="REQUIRED"
                    KeyLength="256">
            <ProviderAlgo ProviderId="BC"
                          RequiredKey="AES"
                          JCEName="AES/CBC/ISO10126PADDING"
                          IVJCEName="AES/ECB/NOPADDING" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="Rijndael" />
         </Algorithm>

         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#rsa-1_5"
                    Description="Key Transport RSA-v1.5"
                    AlgorithmClass="KeyTransport"
                    RequirementLevel="REQUIRED">
            <!-- You have to provide a core RSA mechanism here, even for
                 the bouncy castle -->
            <ProviderAlgo ProviderId="BC"
                          JCEName="RSA"
                          RequiredKey="RSA" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="RSA"
                          RequiredKey="RSA" />
            <!-- <ProviderAlgo ProviderId="BC"
                          JCEName="RSA/PKCS1"
                          RequiredKey="RSA" />
            <ProviderAlgo ProviderId="Cryptix"
                          JCEName="RSA/ECB/PKCS#1" /> -->
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"
                    Description="Key Transport RSA-OAEP"
                    AlgorithmClass="KeyTransport"
                    RequirementLevel="REQUIRED">
            <!-- You have to provide a core RSA mechanism here, even for
                 the bouncy castle -->
            <ProviderAlgo ProviderId="BC"
                          JCEName="RSA"
                          RequiredKey="RSA" />
            <!-- <ProviderAlgo ProviderId="BC" JCEName="RSA/OAEP" RequiredKey="RSA" /> -->
         </Algorithm>

         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#dh"
                    Description="Key Agreement Diffie-Hellman"
                    AlgorithmClass="KeyAgreement"
                    RequirementLevel="OPTIONAL">
         </Algorithm>

         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#kw-tripledes"
                    Description="Symmetric Key Wrap using Triple DES"
                    AlgorithmClass="SymmetricKeyWrap"
                    RequirementLevel="REQUIRED"
                    KeyLength="192">
            <!-- We need a Triple DES in CipherBlockChaining (CBC) mode here without padding -->
            <ProviderAlgo ProviderId="BC"
                          RequiredKey="DESEDE"
                          JCEName="DESEDE/CBC/NOPADDING" />
            <!-- <ProviderAlgo ProviderId="BC" JCEName="DESEDEWrap" RequiredKey="DESEDE" /> -->
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#kw-aes128"
                    Description="Symmetric Key Wrap using AES with a key length of 128 bit"
                    AlgorithmClass="SymmetricKeyWrap"
                    RequirementLevel="REQUIRED"
                    KeyLength="128">
            <!-- We need an AES in ElectronicCodeBook (ECB) mode here without padding -->
            <ProviderAlgo ProviderId="BC"
                          JCEName="AES/ECB/NOPADDING"
                          RequiredKey="AES" />
            <!-- <ProviderAlgo ProviderId="BC" JCEName="AESWrap" RequiredKey="AES" /> -->
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#kw-aes192"
                    Description="Symmetric Key Wrap using AES with a key length of 192 bit"
                    AlgorithmClass="SymmetricKeyWrap"
                    RequirementLevel="OPTIONAL"
                    KeyLength="192">
            <!-- We need an AES in ElectronicCodeBook (ECB) mode here without padding -->
            <ProviderAlgo ProviderId="BC"
                          JCEName="AES/ECB/NOPADDING"
                          RequiredKey="AES" />
            <!-- <ProviderAlgo ProviderId="BC" JCEName="AESWrap" RequiredKey="AES" /> -->
         </Algorithm>
         <Algorithm URI="http://www.w3.org/2001/04/xmlenc#kw-aes256"
                    Description="Symmetric Key Wrap using AES with a key length of 256 bit"
                    AlgorithmClass="SymmetricKeyWrap"
                    RequirementLevel="REQUIRED"
                    KeyLength="256">
            <!-- We need an AES in ElectronicCodeBook (ECB) mode here without padding -->
            <ProviderAlgo ProviderId="BC"
                          JCEName="AES/ECB/NOPADDING"
                          RequiredKey="AES" />
            <!-- <ProviderAlgo ProviderId="BC" JCEName="AESWrap" RequiredKey="AES" /> -->
         </Algorithm>
      </Algorithms>
   </JCEAlgorithmMappings>
   <ResourceBundles defaultLanguageCode="en" defaultCountryCode="US">
      <ResourceBundle LanguageCode="en"
                      CountryCode="US"
                      LOCATION="org.apache.xml.security/resource/xmlsecurity_en.properties" />
      <ResourceBundle LanguageCode="de"
                      CountryCode="DE"
                      LOCATION="org.apache.xml.security/resource/xmlsecurity_de.properties" />
   </ResourceBundles>
   <ResourceResolvers>
      <Resolver JAVACLASS="org.apache.xml.security.utils.resolver.implementations.ResolverDirectHTTP"
                DESCRIPTION="A simple resolver for requests to HTTP space" />
      <Resolver JAVACLASS="org.apache.xml.security.utils.resolver.implementations.ResolverLocalFilesystem"
                DESCRIPTION="A simple resolver for requests to the local file system" />
      <Resolver JAVACLASS="org.apache.xml.security.utils.resolver.implementations.ResolverFragment"
                DESCRIPTION="A simple resolver for requests of same-document URIs" />
      <Resolver JAVACLASS="org.apache.xml.security.utils.resolver.implementations.ResolverXPointer"
                DESCRIPTION="A simple resolver for requests of XPointer fragents" />
   </ResourceResolvers>
   <!-- <defaultLocale languageCode="en" countryCode="US" /> -->
   <KeyInfo>
      <ContentHandler LOCALNAME="KeyName"
                      NAMESPACE="http://www.w3.org/2000/09/xmldsig#"
                      JAVACLASS="org.apache.xml.security.keys.content.KeyName" />
      <ContentHandler LOCALNAME="KeyValue"
                      NAMESPACE="http://www.w3.org/2000/09/xmldsig#"
                      JAVACLASS="org.apache.xml.security.keys.content.KeyValue" />
      <ContentHandler LOCALNAME="RetrievalMethod"
                      NAMESPACE="http://www.w3.org/2000/09/xmldsig#"
                      JAVACLASS="org.apache.xml.security.keys.content.RetrievalMethod" />
      <ContentHandler LOCALNAME="X509Data"
                      NAMESPACE="http://www.w3.org/2000/09/xmldsig#"
                      JAVACLASS="org.apache.xml.security.keys.content.X509Data" />
      <ContentHandler LOCALNAME="PGPData"
                      NAMESPACE="http://www.w3.org/2000/09/xmldsig#"
                      JAVACLASS="org.apache.xml.security.keys.content.PGPData" />
      <ContentHandler LOCALNAME="SPKIData"
                      NAMESPACE="http://www.w3.org/2000/09/xmldsig#"
                      JAVACLASS="org.apache.xml.security.keys.content.SPKIData" />
      <ContentHandler LOCALNAME="MgmtData"
                      NAMESPACE="http://www.w3.org/2000/09/xmldsig#"
                      JAVACLASS="org.apache.xml.security.keys.content.MgmtData" />
   </KeyInfo>
   <KeyResolver>
      <!-- This section contains a list of KeyResolvers that are available in
           every KeyInfo object -->
      <Resolver JAVACLASS="org.apache.xml.security.keys.keyresolver.implementations.RSAKeyValueResolver"
                DESCRIPTION="Can extract RSA public keys" />
      <Resolver JAVACLASS="org.apache.xml.security.keys.keyresolver.implementations.DSAKeyValueResolver"
                DESCRIPTION="Can extract DSA public keys" />
      <Resolver JAVACLASS="org.apache.xml.security.keys.keyresolver.implementations.X509CertificateResolver"
                DESCRIPTION="Can extract public keys from X509 certificates" />
      <Resolver JAVACLASS="org.apache.xml.security.keys.keyresolver.implementations.X509SKIResolver"
                DESCRIPTION="Uses an X509v3 SubjectKeyIdentifier extension to retrieve a certificate from the storages" />
      <Resolver JAVACLASS="org.apache.xml.security.keys.keyresolver.implementations.RetrievalMethodResolver"
                DESCRIPTION="Resolves keys and certificates using ResourceResolvers" />
      <Resolver JAVACLASS="org.apache.xml.security.keys.keyresolver.implementations.X509SubjectNameResolver"
                DESCRIPTION="Uses an X509 SubjectName to retrieve a certificate from the storages" />
      <Resolver JAVACLASS="org.apache.xml.security.keys.keyresolver.implementations.X509IssuerSerialResolver"
                DESCRIPTION="Uses an X509 IssuerName and IssuerSerial to retrieve a certificate from the storages" />
   </KeyResolver>
 
   <PrefixMappings>
      <!-- Many classes create Elements which are in a specific namespace;
           here, the prefixes for these namespaces are defined. But this
           can also be overwritten using the ElementProxy#setDefaultPrefix()
           method. You can even set all prefixes to "" so that the corresponding
           elements are created using the default namespace -->
      <PrefixMapping namespace="http://www.w3.org/2000/09/xmldsig#"
                     prefix="ds" />
      <PrefixMapping namespace="http://www.w3.org/2001/04/xmlenc#"
                     prefix="xenc" />
      <PrefixMapping namespace="http://www.xmlsecurity.org/experimental#"
                     prefix="experimental" />
      <PrefixMapping namespace="http://www.w3.org/2002/04/xmldsig-filter2"
                     prefix="dsig-xpath-old" />
      <PrefixMapping namespace="http://www.w3.org/2002/06/xmldsig-filter2"
                     prefix="dsig-xpath" />
      <PrefixMapping namespace="http://www.w3.org/2001/10/xml-exc-c14n#"
                     prefix="ec" />
      <PrefixMapping namespace="http://www.nue.et-inf.uni-siegen.de/~geuer-pollmann/#xpathFilter"
                     prefix="xx" />
   </PrefixMappings>
</Configuration>
