<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 3/29/13 2:16 PM, Nunez, Luis K
      wrote:<br>
    </div>
    <blockquote
      cite="mid:FDCC719E8EC4714EBFDE8473009EF6EC02F670C1@IMCMBX03.MITRE.ORG"
      type="cite">
      <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">Shawn,<o:p></o:p></span></p>
      <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">I
          am not as familiar with xmldsig-core or TMSAD but have you
          consider the “Trust Model for Security Automation Data”.  It
          seems to leverage xmldsig-core and is intended for SCAP.<o:p></o:p></span></p>
      <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p> </o:p></span></p>
      <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">Link
          to <o:p></o:p></span></p>
      <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><a class="moz-txt-link-freetext" href="http://csrc.nist.gov/publications/nistir/ir7802/NISTIR-7802.pdf">http://csrc.nist.gov/publications/nistir/ir7802/NISTIR-7802.pdf</a><o:p></o:p></span></p>
      <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><a class="moz-txt-link-freetext" href="http://scap.nist.gov/specifications/tmsad/">http://scap.nist.gov/specifications/tmsad/</a></span></p>
    </blockquote>
    I'm not very familiar with it -- will review tomorrow (err..
    today?).<br>
  </body>
</html>