src/omxmlsec/c14n/c14n.c (7 lines):
	- line 169: /* TODO:DONE use memcpy for this.*/
	- line 1055: /* TODO: Still need to add the "xml" attrs of the parents in case of doc subsets
	- line 1409: if(ns_ele) /* return AXIS2_FALSE; TODO:check */
	- line 1495: /* TODO:
	- line 1581: /*TODO: set the error*/
	- line 1598: /* TODO:DONE a better buffer implementation */
	- line 1686: /* TODO:DONE a better buffer implementation */


src/util/rampart_sec_header_processor.c (6 lines):
	- line 692: /* TODO:Populate assymetric context */
	- line 1665: /* TODO WS-SecurityPolicy 1.2 allows endorsing signature to include some other parts as
	- line 1704: /* TODO for the moment, we support only asymmetric endorsing using x509 */
	- line 1712: /* TODO validate the token type, inclusion method, reference method here */
	- line 2022: /* TODO validate the namespace */
	- line 2055: /* TODO this way of validating endorsing signature is wrong. Correct it */


src/rahas/rahas_in_handler.c (2 lines):
	- line 340: /* TODO implement cancel method */
	- line 419: /* TODO: we still don't support amend and renew. Implement them */


src/omxmlsec/xml_encryption.c (2 lines):
	- line 229: * TODO: This method should get the key from the key_node. Currently key is taken from
	- line 567: /*TODO: Need to support Thumbprint Ref*/


src/omxmlsec/derivation.c (2 lines):
	- line 88: /* TODO Lots of work including decrypting the EncryptedKey */
	- line 255: /* TODO check for derivation algorithm */


src/omxmlsec/openssl/sign.c (2 lines):
	- line 54: /*TODO: Set the digest according to the signature method*/
	- line 97: /*TODO Set the digest according to the signature method*/


src/omxmlsec/tokens/token_encrypted_key.c (1 line):
	- line 53: /* TODO */


src/omxmlsec/tokens/token_cipher_data.c (1 line):
	- line 65: /* TODO */


src/omxmlsec/tokens/token_digest_value.c (1 line):
	- line 27: /* TODO Verification */


src/util/rampart_sec_header_builder.c (1 line):
	- line 518: * TODO: Remove later*/


src/omxmlsec/transforms_factory.c (1 line):
	- line 75: sig_node = axiom_node_detach(child_node, env); /* TODO should we use detach_without_namespace here?? */


src/omxmlsec/tokens/token_x509_serial_number.c (1 line):
	- line 27: /* TODO Verification */


include/oxs_saml_token.h (1 line):
	- line 29: /* TODO OXS_ST_KEY_ID_VALUE_TYPE looks odd. Rename it properly */


src/omxmlsec/tokens/token_x509_issuer_name.c (1 line):
	- line 27: /* TODO Verification */


src/util/rampart_context.c (1 line):
	- line 1597: /*TODO error*/


src/omxmlsec/tokens/token_signature_value.c (1 line):
	- line 26: /* TODO Verification */


src/omxmlsec/tokens/token_x509_certificate.c (1 line):
	- line 27: /* TODO Verification */


src/omxmlsec/tokens/token_cipher_value.c (1 line):
	- line 27: /* TODO Verification */