Insecurities in Designing XML Signatures