Summary

Update the XML Signature implementation (primarily in the com/sun/org/apache/xml/internal/ classes) in the JDK to version 3.0.3 of Apache Santuario. This is a CSR request for the 21u/17u/11u/8u JDK releases..

4 new SHA-3 based XML signature methods were defined in this Santuario release. Unlike the JDK 22 fix, the JDK update releases won't define those signature methods in the javax.xml.crypto.dsig.SignatureMethod class but the underlying implementation code will be integrated for use via the XML signature implementation. User can directly use the names of these signature methods since they are just string literals.

Problem

Apache Santuario 3.0.3 introduced support for 4 new signature methods. We should support them.

Solution

Import Apache Santuario 3.0.3. For the update releases, the new algorithm URIs won't be defined in public spec.

Specification

N/A Implementation changes. A release note will be added to indicate support of Santuario 3.0.3