xmlsec

What it is and what it does

xmlsec is a Python wrapper around the XML Security Library, a C library for cryptographic operations on XML documents. It lets you sign XML documents with digital certificates, verify signatures, and perform related cryptographic tasks. The package depends on lxml and requires system-level installation of libxml2 and libxmlsec1 before use.

The library is production-stable and actively maintained. It supports Python 3.9 through 3.14 and provides prebuilt wheels for most common platforms, though building from source on less common architectures may require manual compilation. Use it when you need to add XML signature or verification capabilities to applications handling XML-based security protocols.

Use it for:

• Sign and verify XML documents in enterprise messaging systems
• Validate digitally signed XML in protocol implementations
• Implement XML encryption and decryption for sensitive data transport
• Verify XML signatures in web service communications
• Build systems requiring cryptographic proof of XML document authenticity

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Python bindings for XML Security Library, enabling cryptographic signing and verification of XML documents.

Yes, if you need XML cryptographic operations. The package is production-stable, actively maintained, and has no known vulnerabilities. Install friction is moderate due to native library dependencies, but prebuilt wheels for common platforms ease deployment. Permissive MIT license poses no legal friction. Verify that libxml2 >= 2.9.1 and libxmlsec1 >= 1.2.33 are available on your target systems before committing.

Install

xmlsec on PyPI

pip install xmlsec

uv add xmlsec

poetry add xmlsec

Installing xmlsec

Before you install

Medium install friction due to compiled C extension requiring native libraries (libxml2 >= 2.9.1, libxmlsec1 >= 1.2.33). Prebuilt wheels available for Python 3.9–3.14 on macOS, Linux, and Windows reduce friction on common platforms. Repository is active with recent commits.

License in practice

MIT license permits commercial and private use with minimal restrictions; no copyleft obligations or patent concerns.

Quickstart

pip install xmlsec
import xmlsec
# See xmlsec.readthedocs.io/en/latest/examples.html for signing and verification examples

Requires libxml2 >= 2.9.1 and libxmlsec1 >= 1.2.33 installed on the system before pip install

Verify before relying

• Whether prebuilt wheels cover all target deployment architectures (riscv64 wheels present but platform adoption unclear)
• Performance characteristics for large-scale XML document signing or verification workflows
• Compatibility with specific XML Security Library versions beyond the stated minimum

Package facts

Evidence: xmlsec-1.3.17-cp310-cp310-macosx_10_9_x86_64.whl; xmlsec-1.3.17-cp310-cp310-macosx_11_0_arm64.whl; xmlsec-1.3.17-cp310-cp310-manylinux_2_26_aarch64.manylinux_2_28_aarch64.whl; xmlsec-1.3.17-cp310-cp310-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl; xmlsec-1.3.17-cp310-cp310-manylinux_2_38_riscv64.manylinux_2_39_riscv64.whl; xmlsec-1.3.17-cp310-cp310-musllinux_1_2_aarch64.whl; xmlsec-1.3.17-cp310-cp310-musllinux_1_2_x86_64.whl; xmlsec-1.3.17-cp310-cp310-win_amd64.whl; xmlsec-1.3.17-cp310-cp310-win_arm64.whl; xmlsec-1.3.17-cp311-cp311-macosx_10_9_x86_64.whl; xmlsec-1.3.17-cp311-cp311-macosx_11_0_arm64.whl; xmlsec-1.3.17-cp311-cp311-manylinux_2_26_aarch64.manylinux_2_28_aarch64.whl; xmlsec-1.3.17-cp311-cp311-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl; xmlsec-1.3.17-cp311-cp311-manylinux_2_38_riscv64.manylinux_2_39_riscv64.whl; xmlsec-1.3.17-cp311-cp311-musllinux_1_2_aarch64.whl; xmlsec-1.3.17-cp311-cp311-musllinux_1_2_x86_64.whl; xmlsec-1.3.17-cp311-cp311-win_amd64.whl; xmlsec-1.3.17-cp311-cp311-win_arm64.whl; xmlsec-1.3.17-cp312-cp312-macosx_10_13_x86_64.whl; xmlsec-1.3.17-cp312-cp312-macosx_11_0_arm64.whl

Keywords: xmlsec

Tags

More XML packages