Great! FYI, there is a "--session-key" option that tells xmlsec utility to generate key "on the fly". It might be a better solution than writing the DES key to a file. Aleksey