Collaborate Disseminate
For a mobile application I would like to be so compliant as possible with the AdES standard.
The mobile application will perform operations on behalf of the user, signing them first. A backend service will verify the signat… Continue reading Certificate generation using Advanced Electronic Signature (AdES)
The EU has fixed a flaw in the powerful yet complex eIDAS digital identification system that let people authenticate as someone else. Continue reading Researchers find hole in EU-wide identity system
I have a document F that I don’t have access to, but I have its hash H'(F) calculated with an algorithm H’ that is not included in the list of recommended hash functions in EN 119 312 (referenced by EN 319 422), but it can be… Continue reading Is a timestamp of hash(hash(document)) valid under eIDAS?
I am newbie in PKI. For signing a pdf documents we are free to consider each pkcs#7 format or PADES format. If I have some misunderstandings, please turn it on for me.
Continue reading What is the difference between PKCS#7 and CADES, PADES and XADES?
If I have:
A file, X
The RFC3161 timestamp token of X
Are these sufficient to build a (single file) ASiC container with the file and the timestamp?
In other words, is the timestamp included in the ASiC container just a t… Continue reading Is it possible to build an ASiC container out of a file and its timestamp token?
In order to validate if a trust service is qualified, one should search for the public key in a member state trusted list (TL).
In order to validate if a member state TL is authentic, one should search for the public key tha… Continue reading How to validate that a EU List of Trusted Lists is authentic?
A qualified trust service provider under eIDAS uses ESSCertIDv2 for their time stamp tokens, but ESSCertIDv2 was not present in the RFC 3161 specification, it was added later in RFC 5816.
RFC 3161 in 2.4.2 requires ESSCertID:
The certific… Continue reading Use of ESSCertIDv2 in a RFC 3161 Timestamp
I need to timestamp a file to prove data integrity, not authorship. I will use a RFC3161 qualified timestamping service.
From the EU Regulation Section 6, Article 41, I understand that I can use a timestamp without an electr… Continue reading How to timestamp a document without electronic signature under eIDAS
In eIDAS there is written in Article 31:
On the basis of the information received, the Commission shall establish, publish and maintain a list of certified qualified electronic signature creation devices
Where can… Continue reading eIDAS – list of certified qualified electronic signature creation devices