nora_mark 0.2beta3 → 0.2beta4

data/spec/epub30-schemas/mod/security/Lenient-Signature-exclusiveC14N.rnc

@@ -0,0 +1,25 @@
+# Lenient-Signature-exclusiveC14N.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+
+namespace ds = "http://www.w3.org/2000/09/xmldsig#"
+namespace ec = "http://www.w3.org/2001/10/xml-exc-c14n#"
+
+start = anyForeignElementOrSignature
+anyForeignElementOrSignature = 
+  element * -  ds:* { 
+    mixed { security_anyAttribute*, anyForeignElementOrSignature* } }
+  | ds_Signature
+ds_anyForeignElement = element * - ds:* {
+  mixed { security_anyAttribute*, security_anyElement* } }
+
+include "security_any.rnc"
+include "xmldsig-core-schema.rnc"
+include "xmldsig-allowAnyForeign.rnc"
+include "exc-c14n.rnc"

data/spec/epub30-schemas/mod/security/Lenient-Signature11-properties-exclusiveC14N.rnc

@@ -0,0 +1,32 @@
+# Lenient-Signature11-properties-exclusiveC14N.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+
+namespace ds = "http://www.w3.org/2000/09/xmldsig#"
+namespace ds11 = "http://www.w3.org/2009/xmldsig11#"
+namespace dsp = "http://www.w3.org/2009/xmldsig-properties"
+namespace ec = "http://www.w3.org/2001/10/xml-exc-c14n#"
+
+start = anyForeignElementOrSignature
+anyForeignElementOrSignature = 
+  element * -  (ds:* | ds11:* | dsp:* | ec:*) { 
+    mixed { security_anyAttribute*, anyForeignElementOrSignature* } }
+  | ds_Signature
+ds_anyForeignElement = element * - ds:* {
+  mixed { security_anyAttribute*, security_anyElement* } }
+dsig11_anyForeignElement = element * - ds11:* {
+  mixed { security_anyAttribute*, security_anyElement* } }
+
+include "security_any.rnc"
+include "xmldsig-core-schema.rnc"
+include "xmldsig11-schema.rnc"
+include "xmldsig-allowAnyForeign.rnc"
+include "xmldsig11-allowAnyForeign.rnc"
+include "xmldsig-properties-schema.rnc"
+include "exc-c14n.rnc"

data/spec/epub30-schemas/mod/security/Lenient-Signature11-properties.rnc

@@ -0,0 +1,30 @@
+# Lenient-Signature11-properties.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+
+namespace ds = "http://www.w3.org/2000/09/xmldsig#"
+namespace ds11 = "http://www.w3.org/2009/xmldsig11#"
+namespace dsp = "http://www.w3.org/2009/xmldsig-properties"
+
+start = anyForeignElementOrSignature
+anyForeignElementOrSignature = 
+  element * -  (ds:* | ds11:* | dsp:*) { 
+    mixed { security_anyAttribute*, anyForeignElementOrSignature* } }
+  | ds_Signature
+ds_anyForeignElement = element * - ds:* {
+  mixed { security_anyAttribute*, security_anyElement* } }
+dsig11_anyForeignElement = element * - ds11:* {
+  mixed { security_anyAttribute*, security_anyElement* } }
+
+include "security_any.rnc"
+include "xmldsig-core-schema.rnc"
+include "xmldsig11-schema.rnc"
+include "xmldsig-allowAnyForeign.rnc"
+include "xmldsig11-allowAnyForeign.rnc"
+include "xmldsig-properties-schema.rnc"

data/spec/epub30-schemas/mod/security/Lenient-Signature11.rnc

@@ -0,0 +1,28 @@
+# Lenient-Signature11.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+
+namespace ds = "http://www.w3.org/2000/09/xmldsig#"
+namespace ds11 = "http://www.w3.org/2009/xmldsig11#"
+
+start = anyForeignElementOrSignature
+anyForeignElementOrSignature = 
+  element * -  (ds:* | ds11:*) { 
+    mixed { security_anyAttribute*, anyForeignElementOrSignature* } }
+  | ds_Signature
+ds_anyForeignElement = element * - ds:* {
+  mixed { security_anyAttribute*, security_anyElement* } }
+dsig11_anyForeignElement = element * - ds11:* {
+  mixed { security_anyAttribute*, security_anyElement* } }
+
+include "security_any.rnc"
+include "xmldsig-core-schema.rnc"
+include "xmldsig11-schema.rnc"
+include "xmldsig-allowAnyForeign.rnc"
+include "xmldsig11-allowAnyForeign.rnc"

data/spec/epub30-schemas/mod/security/Strict-Encryption.rnc

@@ -0,0 +1,27 @@
+# Strict-Encryption.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+
+namespace ds = "http://www.w3.org/2000/09/xmldsig#"
+namespace xenc = "http://www.w3.org/2001/04/xmlenc#"
+
+start = anyForeignElementOrEncrypted
+anyForeignElementOrEncrypted = 
+  element * -  xenc:* { 
+    mixed { security_anyAttribute*, anyForeignElementOrEncrypted* } }
+  | xenc_EncryptedData
+  | xenc_EncryptedKey
+ds_anyForeignElement = element * - (ds:* | xenc:*) {
+  mixed { security_anyAttribute*, security_anyElement* } }
+xenc_anyForeignElement = element * - xenc:* {
+  mixed { security_anyAttribute*, security_anyElement* } }
+
+include "security_any.rnc"
+include "xmldsig-core-schema.rnc"
+include "xenc-schema.rnc"

data/spec/epub30-schemas/mod/security/Strict-Signature.rnc

@@ -0,0 +1,22 @@
+# Strict-Signature.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+
+namespace ds = "http://www.w3.org/2000/09/xmldsig#"
+
+start = anyForeignElementOrSignature
+anyForeignElementOrSignature = 
+  element * -  ds:* { 
+    mixed { security_anyAttribute*, anyForeignElementOrSignature* } }
+  | ds_Signature
+ds_anyForeignElement = element * - ds:* {
+  mixed { security_anyAttribute*, security_anyElement* } }
+
+include "security_any.rnc"
+include "xmldsig-core-schema.rnc"

data/spec/epub30-schemas/mod/security/exc-c14n.rnc

@@ -0,0 +1,39 @@
+# exc-c14n.rnc (derived from exc-c14n.xsd)
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+#
+# This RELAX NG schema allows the use of two algorithms, namely 
+#
+#   http://www.w3.org/2001/10/xml-exc-c14n# and 
+#   http://www.w3.org/2001/10/xml-exc-c14n#WithComments,
+#
+# in ds_CanonicalizationMethodType, which specifies permissible
+# contents of Transform or CanonicalizationMethod elements.
+#
+# The definition of ds_CanonicalizationMethodType in this schema is 
+# combined with the other definitions of ds_CanonicalizationMethodType
+# by the choice operator.
+
+default namespace = "http://www.w3.org/2001/10/xml-exc-c14n#"
+
+ds_CanonicalizationMethodType |=
+  attribute Algorithm {
+    xsd:anyURI "http://www.w3.org/2001/10/xml-exc-c14n#"
+    | xsd:anyURI "http://www.w3.org/2001/10/xml-exc-c14n#WithComments"
+  },
+  ec_InclusiveNamespaces?
+ec_InclusiveNamespaces =
+  element InclusiveNamespaces {
+    attribute PrefixList { xsd:NMTOKENS }
+  }
+
+# List of known algorithms
+ds_CanonicalizationAlgorithms |=  
+  xsd:anyURI "http://www.w3.org/2001/10/xml-exc-c14n#"
+  | xsd:anyURI "http://www.w3.org/2001/10/xml-exc-c14n#WithComments" 

data/spec/epub30-schemas/mod/security/security_any.rnc

@@ -0,0 +1,15 @@
+# security_any.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+#
+# This RELAX NG schema defines security_anyElement, which allows any element,
+# and security_anyAttribute, which allows any attribute.
+
+security_anyElement = element * { mixed { security_anyAttribute*, security_anyElement* } }
+security_anyAttribute = attribute * { text }

data/spec/epub30-schemas/mod/security/xenc-allowAnyForeign.rnc

@@ -0,0 +1,25 @@
+# xenc-allowAnyForeign.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+#
+# This schema mimicks <any namespace='##other'.../>
+# in xenc-schema.xsd.
+# 
+# Schema authors might want to create a dedicated schema 
+# for a collection of particular algorithms rather than 
+# using this schema.
+
+xenc_EncryptionMethodOtherParams |=
+  attribute Algorithm {
+    xsd:anyURI - xenc_EncryptionAlgorithms },
+  xenc_anyForeignElement*
+xenc_AgreementMethodParams |=
+  attribute Algorithm {
+    xsd:anyURI - xenc_KeyAgreementAlgorithms },
+  xenc_anyForeignElement*

data/spec/epub30-schemas/mod/security/xenc-schema-11.rnc

@@ -0,0 +1,96 @@
+# xenc-schema-11.rnc (derived from xenc-schema.xsd)
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+#
+# This schema complements "xenc-schema.rnc" by introducing 
+# elements specific to 1.1.  Note that the definitions of
+# xenc_EncryptionMethodOtherParams and 
+# xenc_AgreementMethodParams have been extended so that 
+# elements specific to 1.1 are allowed.
+
+default namespace = "http://www.w3.org/2009/xmlenc11#"
+namespace ds = "http://www.w3.org/2000/09/xmldsig#"
+namespace xenc = "http://www.w3.org/2001/04/xmlenc#"
+namespace xenc11 = "http://www.w3.org/2009/xmlenc11#"
+
+xenc11_ConcatKDFParams =
+  element ConcatKDFParams { xenc11_ConcatKDFParamsType }
+xenc11_ConcatKDFParamsType =
+  attribute AlgorithmID { xsd:hexBinary }?,
+  attribute PartyUInfo { xsd:hexBinary }?,
+  attribute PartyVInfo { xsd:hexBinary }?,
+  attribute SuppPubInfo { xsd:hexBinary }?,
+  attribute SuppPrivInfo { xsd:hexBinary }?,
+  ds_DigestMethod
+xenc11_DerivedKey = element DerivedKey { xenc11_DerivedKeyType }
+xenc11_DerivedKeyType =
+  attribute Recipient { xsd:string }?,
+  attribute Id { xenc11_IdType }?,
+  attribute Type { xsd:anyURI }?,
+  xenc11_KeyDerivationMethod?,
+  xenc_ReferenceList?,
+  element DerivedKeyName { xsd:string }?,
+  element MasterKeyName { xsd:string }?
+xenc11_KeyDerivationMethod =
+  element KeyDerivationMethod { xenc11_KeyDerivationMethodType }
+xenc11_KeyDerivationMethodType = 
+    (attribute Algorithm { xsd:anyURI "http://www.w3.org/2009/xmlenc11#ConcatKDF" },
+     xenc11_ConcatKDFParams)
+  | (attribute Algorithm { xsd:anyURI "http://www.w3.org/2009/xmlenc11#pbkdf2" },
+     xenc11_PBKDF2-params)
+xenc11_PBKDF2-params =
+  element PBKDF2-params { xenc11_PBKDF2ParameterType }
+xenc11_AlgorithmIdentifierType =
+  attribute Algorithm { xsd:anyURI },
+  element Parameters { security_anyAttribute*, mixed { security_anyElement* } }?
+xenc11_PRFAlgorithmIdentifierType =
+  # Restricts xenc11:AlgorithmIdentifierType
+  attribute Algorithm { xsd:anyURI }
+xenc11_PBKDF2ParameterType =
+  element Salt {
+    element Specified { xsd:base64Binary }
+    | element OtherSource { xenc11_AlgorithmIdentifierType }
+  },
+  element IterationCount { xsd:positiveInteger },
+  element KeyLength { xsd:positiveInteger },
+  element PRF { xenc11_PRFAlgorithmIdentifierType }
+
+xenc11_IdType = xsd:NCName # xsd:ID does not work
+
+xenc_EncryptionMethodOtherParams |= 
+  attribute Algorithm {
+# Block Encryption
+    xsd:anyURI "http://www.w3.org/2009/xmlenc11#aes128-gcm"
+    | xsd:anyURI "http://www.w3.org/2009/xmlenc11#aes256-gcm"
+# Symmetric Key Wrap
+    | xsd:anyURI "http://www.w3.org/2009/xmlenc11#kw-aes-128-pad"
+    | xsd:anyURI "http://www.w3.org/2009/xmlenc11#kw-aes-192-pad"
+    | xsd:anyURI "http://www.w3.org/2009/xmlenc11#kw-aes-256-pad"
+  }
+
+xenc_AgreementMethodParams |=
+    attribute Algorithm { xsd:anyURI "http://www.w3.org/2009/xmlenc11#dh-es" }
+  | attribute Algorithm { xsd:anyURI "http://www.w3.org/2009/xmlenc11#ECDH-ES" }
+
+
+# List of known algorithms
+xenc_EncryptionAlgorithms |=
+# Block Encryption
+    xsd:anyURI "http://www.w3.org/2009/xmlenc11#aes128-gcm"
+  | xsd:anyURI "http://www.w3.org/2009/xmlenc11#aes256-gcm"
+# Symmetric Key Wrap
+  |  xsd:anyURI "http://www.w3.org/2009/xmlenc11#kw-aes-128-pad"
+  | xsd:anyURI "http://www.w3.org/2009/xmlenc11#kw-aes-192-pad"
+  | xsd:anyURI "http://www.w3.org/2009/xmlenc11#kw-aes-256-pad"
+xenc_KeyAgreementAlgorithms |= 
+    xsd:anyURI "http://www.w3.org/2009/xmlenc11#dh-es"
+  | xsd:anyURI "http://www.w3.org/2009/xmlenc11#ECDH-ES"
+xenc11_KeyDerivationAlgorithms = 
+    xsd:anyURI "http://www.w3.org/2009/xmlenc11#ConcatKDF"
+  | xsd:anyURI "http://www.w3.org/2009/xmlenc11#pbkdf2"

data/spec/epub30-schemas/mod/security/xenc-schema.rnc

@@ -0,0 +1,145 @@
+# xenc-schema.rnc (derived from xenc-schema.xsd)
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+#
+#It is assumed that the driver schema imports xmldsig-core-schema.rnc.
+
+
+default namespace = "http://www.w3.org/2001/04/xmlenc#"
+namespace xenc = "http://www.w3.org/2001/04/xmlenc#"
+
+ds_KeyValueType |= xenc_DHKeyValue
+ds_DigestMethodType |=
+  attribute Algorithm { 
+      xsd:anyURI "http://www.w3.org/2001/04/xmlenc#sha256"
+    | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#sha512"
+    | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#ripemd160"
+  }
+
+xenc_EncryptedType =
+  attribute Id { xenc_IdType }?,
+  attribute Type { xsd:anyURI }?,
+  attribute MimeType { xsd:string }?,
+  attribute Encoding { xsd:anyURI }?,
+  element EncryptionMethod { xenc_EncryptionMethodType }?,
+  ds_KeyInfo?,
+  xenc_CipherData,
+  xenc_EncryptionProperties?
+xenc_EncryptionMethodType =
+  mixed {
+    element KeySize { xenc_KeySizeType }?,
+    xenc_EncryptionMethodOtherParams
+  }
+
+ds_KeyInfoChild |= xenc_EncryptedKey | xenc_AgreementMethod
+
+xenc_EncryptionMethodOtherParams = 
+    attribute Algorithm { xsd:anyURI "http://www.w3.org/2001/04/xmlenc#tripledes-cbc" } 
+  | attribute Algorithm { xsd:anyURI "http://www.w3.org/2001/04/xmlenc#aes128-cbc" } 
+  | attribute Algorithm { xsd:anyURI "http://www.w3.org/2001/04/xmlenc#aes256-cbc" }
+  | attribute Algorithm { xsd:anyURI "http://www.w3.org/2001/04/xmlenc#aes192-cbc" }
+  | attribute Algorithm { xsd:anyURI "http://www.w3.org/2001/04/xmlenc#rsa-1_5" } 
+  | (attribute Algorithm { xsd:anyURI "http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" },
+     element OAEPparams { xsd:base64Binary }?,
+     ds_DigestMethod?)
+  | attribute Algorithm { xsd:anyURI "http://www.w3.org/2001/04/xmlenc#kw-tripledes" }
+  | attribute Algorithm { 
+        xsd:anyURI "http://www.w3.org/2001/04/xmlenc#kw-aes128"
+      | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#kw-aes192"
+      | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#kw-aes256"
+    }
+
+xenc_KeySizeType = xsd:integer
+xenc_CipherData = element CipherData { xenc_CipherDataType }
+xenc_CipherDataType =
+  element CipherValue { xsd:base64Binary }
+  | xenc_CipherReference
+xenc_CipherReference =
+  element CipherReference { xenc_CipherReferenceType }
+xenc_CipherReferenceType =
+  attribute URI { xsd:anyURI },
+  element Transforms { xenc_TransformsType }?
+xenc_TransformsType = ds_Transform+
+xenc_EncryptedData = element EncryptedData { xenc_EncryptedDataType }
+xenc_EncryptedDataType = xenc_EncryptedType
+xenc_EncryptedKey = element EncryptedKey { xenc_EncryptedKeyType }
+xenc_EncryptedKeyType =
+  xenc_EncryptedType,
+  xenc_ReferenceList?,
+  element CarriedKeyName { xsd:string }?,
+  attribute Recipient { xsd:string }?
+xenc_AgreementMethod =
+  element AgreementMethod { xenc_AgreementMethodType }
+xenc_AgreementMethodType =
+  mixed {
+    element KA-Nonce { xsd:base64Binary }?,
+    xenc_AgreementMethodParams,
+    element OriginatorKeyInfo { ds_KeyInfoType }?,
+    element RecipientKeyInfo { ds_KeyInfoType }?
+  }
+xenc_AgreementMethodParams =
+  attribute Algorithm { xsd:anyURI "http://www.w3.org/2001/04/xmlenc#dh" },
+  ds_DigestMethod
+
+xenc_ReferenceList =
+  element ReferenceList {
+    (element DataReference { xenc_ReferenceType }
+     | element KeyReference { xenc_ReferenceType })+
+  }
+xenc_ReferenceType =
+  attribute URI { xsd:anyURI },
+  xenc_anyForeignElement*
+#For both types of references one may optionally specify child elements to aid the recipient in retrieving the EncryptedKey and/or EncryptedData elements. These could include information such as XPath transforms, decompression transforms, or information on how to retrieve the elements from a document storage facility. For example:
+#ds_Transforms
+
+xenc_EncryptionProperties =
+  element EncryptionProperties { xenc_EncryptionPropertiesType }
+xenc_EncryptionPropertiesType =
+  attribute Id { xenc_IdType }?,
+  xenc_EncryptionProperty+
+xenc_EncryptionProperty =
+  element EncryptionProperty { xenc_EncryptionPropertyType }
+xenc_EncryptionPropertyType =
+  mixed {
+    attribute Target { xsd:anyURI }?,
+    attribute Id { xenc_IdType }?,
+    attribute xml:* { text }*,
+    xenc_anyForeignElement+
+  }
+
+xenc_DHKeyValue = element DHKeyValue { xenc_DHKeyValueType }
+xenc_DHKeyValueType =
+  (element P { ds_CryptoBinary },
+   element Q { ds_CryptoBinary },
+   element Generator { ds_CryptoBinary })?,
+  element Public { ds_CryptoBinary },
+  (element seed { ds_CryptoBinary },
+   element pgenCounter { ds_CryptoBinary })?
+
+xenc_IdType = xsd:NCName # xsd:ID does not work
+
+ds_DigestAlgorithms |=
+      xsd:anyURI "http://www.w3.org/2001/04/xmlenc#sha256"
+    | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#sha512"
+    | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#ripemd160"
+
+xenc_EncryptionAlgorithms =
+    xsd:anyURI "http://www.w3.org/2001/04/xmlenc#tripledes-cbc"
+  | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#aes128-cbc"
+  | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#aes256-cbc"
+  | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#aes192-cbc"
+  | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#rsa-1_5"
+  | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"
+  | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#kw-tripledes"
+  | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#kw-aes128"
+  | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#kw-aes256"
+  | xsd:anyURI "http://www.w3.org/2001/04/xmlenc#kw-aes192"
+
+xenc_KeyAgreementAlgorithms = 
+  xsd:anyURI "http://www.w3.org/2001/04/xmlenc#dh"

data/spec/epub30-schemas/mod/security/xenc11-allowAnyForeign.rnc

@@ -0,0 +1,19 @@
+# xenc11-allowAnyForeign.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+#
+# This schema mimicks <any .. /> in xenc-schema-11.xsd.
+# 
+# Schema authors might want to create a dedicated schema 
+# for a collection of particular algorithms rather than 
+# using this schema.
+
+xenc11_KeyDerivationMethodType |= 
+  attribute Algorithm { xsd:anyURI - xenc11_KeyDerivationAlgorithms },
+  xenc11_anyForeignElement*

data/spec/epub30-schemas/mod/security/xmldsig-allowAnyForeign.rnc

@@ -0,0 +1,47 @@
+# xmldsig-allowAnyForeign.rnc
+#
+# Copyright 2011 W3C (Massachusetts Institute of Technology, 
+# Institut National de Recherche en Informatique et en Automatique, 
+# Keio University). All Rights Reserved.  http://www.w3.org/Consortium/Legal/
+# 
+# Use and distribution of all schemas in this directory are permitted under the terms
+# W3C Software Notice and License
+# http://www.w3.org/Consortium/Legal/2002/copyright-software-20021231
+# 
+# This schema mimicks <any ../> in xmldsig-core-schema.xsd.  
+# When namespace="##other", any foreign element is allowed.
+# When namespace="##any", any foreign element as well as 
+# any element valid against xmldsig-core-schema.xsd is allowed.
+# 
+# Schema authors might want to create a dedicated schema 
+# for a collection of particular algorithms rather than 
+# using this schema.
+
+default namespace ds = "http://www.w3.org/2000/09/xmldsig#"
+
+ds_CanonicalizationMethodType |=
+  attribute Algorithm { xsd:anyURI - ds_CanonicalizationAlgorithms },
+  (ds_anyForeignElement | ds_anyDsElement)*
+ds_SignatureMethodType |=
+  attribute Algorithm { xsd:anyURI - ds_SignatureAlgorithms },
+# It is allowed to use an HMACOutputLength element even when
+# the agorithm is not "http://www.w3.org/2000/09/xmldsig#hmac-sha1"
+  element HMACOutputLength { ds_HMACOutputLengthType }?,
+  ds_anyForeignElement*
+ds_TransformType |=
+  attribute Algorithm {
+    xsd:anyURI - (ds_CanonicalizationAlgorithms | ds_TransformAlgorithms) },
+# It is allowed to use XPath elements even when
+# the algorithm is not "http://www.w3.org/TR/1999/REC-xpath-19991116"
+  (ds_anyForeignElement
+   | element XPath { xsd:string })*
+ds_DigestMethodType |=
+  attribute Algorithm { xsd:anyURI - ds_DigestAlgorithms },
+  ds_anyForeignElement*
+ds_KeyInfoChild |= ds_anyForeignElement
+ds_KeyValueType |= ds_anyForeignElement
+ds_X509DataForeignChild |= ds_anyForeignElement
+ds_SPKIDataForeignChild |= ds_anyForeignElement
+ds_ObjectChild |= ds_anyForeignElement
+ds_SignaturePropertyChild |= ds_anyForeignElement
+ds_PGPDataForeignChild |= ds_anyForeignElement