implementation of XKMS. OpenXKMS is JAVA-based and platform-independent (http://sourceforge.net/projects/xkms/). It consists of two main parts: the OpenXKMS Web Service and the OpenXKMS Client API which is used by a client to prepare requests to the OpenXKMS Web Service. 11.4.3.3 XML-Security Module XML-security module is responsible for implementation of standard XML signa- ture and XML encryption components. The XML Signature Module provides mes- sage integrity, signature assurance, and nonrepudiation over Web data (XML). This also provides means procedures for computing and verifying such signature. It is a method associating a key with referenced data. Data objects are digested, the result- ing value is placed in an element (with other information) and that element is then digested and cryptographically signed. XML Encryption is the part of XML-security package that enables the confi- dentiality service. XML encryption module provides that XML content can be transformed such that it is discernable only to the intended recipients, and opaque to all others. XML Encryption has the key feature of being able to encrypt part of an XML document, like a single element or a subtree of elements, but it is also pos- sible to encrypt several elements using several different encryption keys, just like XML signature-this enables for different entities to access different parts of the document exclusively. XML Signature Module consists of Implementation of the RSA private key operation for creating digital signa- ture, as well as a function for signature verification Implementation of hash functions (SHA-1, SHA-256, MD5) Implementation of different symmetrical cryptographic algorithms (AES, IDEA, Serpent, TDES) Service Delivery Platforms Implementation of the RSA private key operation for decryption of encrypted session symmetric key in digital envelope, as well as a function for the cre- ation of an encrypted session symmetric key. 11.4.3.4 WS-Security Module WS-security provides a mechanism that allows one to digitally si