Yes, I am not sure either. Somehow we would have to have something which knows to parse beginning at the boundary down to the first blank line -- leaving out CTE. However, Suresh pointed out that the dSig tools want you to give it the entire ds:Signature element. If we have a foreign ConnonicalizationAlgorithm, is it going to choke? I think these things may be hard coded. I suppose we could recognize the ConnonicalizationAlgorithm value before it goes to the dSig tool and perform the functions at that point. I am not sure how this works. Regards, David.