Introducing a StAX-based approach to XML Security

The 2.0.0 release of the Apache Santuario - XML Security for Java library features a StAX-based (streaming) API for XML Signature and Encryption. This can be used as an alternative to the older DOM-based implementation. The StAX implementation uses far less memory than the DOM implementation for large XML trees. See this blog post for some memory performance graphs that compare the two stacks for XML Signature and XML Encryption.

Streaming XML Signature

Please see the following blog post for information on using the new StAX-based XML Signature functionality in Apache Santuario. It also includes a link to a github project that can be used as a basis for experimenting with the new functionality.

Streaming XML Encryption

Please see the following blog post for information on using the new StAX-based XML Encryption functionality in Apache Santuario. It also includes a link to a github project that can be used as a basis for experimenting with the new functionality.