ru.CryptoPro.JCPxml.xmldsig.JCPXMLDSigInit.init();
            Security.addProvider(new JCSP());
            keyStore = KeyStore.getInstance("HDIMAGE", "JCSP");
            keyStore.load(null, null);
            x509Certificate = (X509Certificate) keyStore.getCertificate(CONTAINER_ALIAS);
            privateKey = (PrivateKey) keyStore.getKey(CONTAINER_ALIAS, CONTAINER_PASSWORD.toCharArray());
            Transform.register(SmevTransformSpi.ALGORITHM_URN, SmevTransformSpi.class.getName());
            santuarioIgnoreLineBreaks(true);

 public Document signXml(Document xmlDoc, String nodeToPlace) {
        try {
            XMLSignature sig = new XMLSignature(xmlDoc, "", XMLDSIG_MORE_GOSTR34102012_GOSTR3411, CANONICALIZATION_METHOD);

            Transforms transforms = new Transforms(xmlDoc);

            transforms.addTransform(Transforms.TRANSFORM_C14N_EXCL_OMIT_COMMENTS);
            transforms.addTransform(SmevTransformSpi.ALGORITHM_URN);

            sig.addDocument(GRID + SIGNATURE_ID_CALLER, transforms, XMLDSIG_MORE_GOSTR3411);

            sig.addKeyInfo(x509Certificate);

            sig.sign(privateKey);

            final Node elementToPlaceSignature = xmlDoc.getElementsByTagNameNS(MESSAGE_EXCHANGE_TYPES_1_3,
                    nodeToPlace).item(0);
            elementToPlaceSignature.appendChild(sig.getElement());


            return xmlDoc;

        } catch (XMLSecurityException e) {
            throw new RuntimeException(e);
        }
    }

   private static final String SIGNATURE_ID_CALLER = "SIGNED_BY_CALLER";

    private static final QName QNAME_SIGNATURE = new QName("http://www.w3.org/2000/09/xmldsig#", "Signature", "ds");

    private static final String XMLDSIG_MORE_GOSTR34102012_GOSTR3411 = "urn:ietf:params:xml:ns:cpxmlsec:algorithms:gostr34102012-gostr34112012-256";
    private static final String XMLDSIG_MORE_GOSTR3411 = "http://www.w3.org/2001/04/xmldsig-more#gostr3411";
    private static final String CANONICALIZATION_METHOD = "http://www.w3.org/2001/10/xml-exc-c14n#";
    private static final String GRID = "#";
    private static final String ID = "Id";

root@1b26104cd5cb:/# /opt/cprocsp/bin/amd64/csptest -keyset -sign GOST12_256 -keytype exchange -in /tmp/test -out /tmp/test.sig
CSP (Type:80) v5.0.10008 KC1 Release Ver:5.0.12000 OS:Linux CPU:AMD64 FastCode:READY:AVX.
AcquireContext: OK. HCRYPTPROV: 16370147
GetProvParam(PP_NAME): Crypto-Pro GOST R 34.10-2012 KC1 CSP
Container name: "pfx-7078232a-7ec6-26e8-27d7-5ae023ac2fc2"
Exchange key is available. HCRYPTKEY: 0xfb5ee3
Hash object created with alg: GOST12_256 0x8021
The data buffer has been hashed.
Signature length 64 found.
Crypto-Pro GOST R 34.10-2012 KC1 CSP requests container password
Type password:
Signature was done.
Output file (/tmp/test.sig) has been saved
Signature saved into file /tmp/test.sig

/opt/cprocsp/bin/amd64/csptest -keyset -sign GOST12_256 -keytype exchange -in /tmp/test -out /tmp/test.sig -container pfx-7078232a-7ec6-26e8-27d7-5ae023ac2fc2
CSP (Type:80) v5.0.10008 KC1 Release Ver:5.0.12000 OS:Linux CPU:AMD64 FastCode:READY:AVX.
AcquireContext: OK. HCRYPTPROV: 11829635
GetProvParam(PP_NAME): Crypto-Pro GOST R 34.10-2012 KC1 CSP
Container name: "pfx-7078232a-7ec6-26e8-27d7-5ae023ac2fc2"
Exchange key is available. HCRYPTKEY: 0xb5ef13
Hash object created with alg: GOST12_256 0x8021
The data buffer has been hashed.
Signature length 64 found.
Crypto-Pro GOST R 34.10-2012 KC1 CSP requests container password
Type password:
Wrong password. Tries left: 4.
Type password:
Signature was done.
Output file (/tmp/test.sig) has been saved
Signature saved into file /tmp/test.sig

Keys in container:
  exchange key
Extensions:
  OID: 1.2.643.2.2.37.3.10
  PrivKey: Not specified - 16.08.2023 19:05:15 (UTC)
Total: SYS: 0.000 sec USR: 0.060 sec UTC: 8.600 sec
[ErrorCode: 0x00000000]

Keys in container:
  exchange key
Extensions:
  OID: 1.2.643.2.2.37.3.10
  PrivKey: Not specified - 16.08.2023 19:05:15 (UTC)
Total: SYS: 0.010 sec USR: 0.020 sec UTC: 5.800 sec

KeyStore.ProtectionParameter entryPassword
                    = new KeyStore.PasswordProtection(CONTAINER_PASSWORD.toCharArray());
            Object entry = keyStore.getEntry(CONTAINER_ALIAS, entryPassword);
            if (entry instanceof JCPPrivateKeyEntry) {
                JCPPrivateKeyEntry jcpPrivateKeyEntry = (JCPPrivateKeyEntry) entry;
                privateKey = jcpPrivateKeyEntry.getPrivateKey();
            }