OCSP-s, Timestamps, CRL-s and certificate data needs to be saved into the PDF for future digital signature validation. This is also called PAdES LTV or in eIDAS terminology PAdES-BASELINE-LT. In one of the previous posts about PAdES we examined how Read more…
Arnis Parsovs is greatest single researcher who has found and helped to fix many security vulnerabilities around Estonian eID card scheme. I can only assume that other countries have all kinds of issues still present. Latest published discovery shows how Read more…
Latvia is a Baltic country that is doing very well with digital identity and qualified electronic signatures. eID and eSignatures are widely used for accessing government systems, bank login and payment confirmations, logging to the utility companies, insurance companies, online Read more…
This article explores how digital signatures in PDF work and how to digitally sign the PDF document when signature is created in remote app, device or service. In the end you will also find references that will help you implement Read more…
XAdES – is eIDAS compliant flexible digital signature format in XML format. It has information of what kind of files are signed by whom. It can contain timestamp and OCSP. It can contain file references or even contents in the Read more…
I have at hand Gemalto Safenet eToken with eIDAS Qualified Electronic Seal (also known as e-Seal or Digital Stamp or Document Signing Certificate) issued by SK ID Solutions. I want to sign sha256 hash with. First I will check some Read more…
This article shows practical examples of how to generate and verify Elliptic curve (ECDSA) signatures using OpenSSL. Step 1. Create private and public EC keys Assuming we want to sign data in test.txt then we need to create hash and Read more…
eIDAS standard can have multiple digital signature profiles. These mean how much proof is embedded into the signature metadata for later validation. Following table contains summary of supported eIDAS digital signature profiles XAdES CAdES PAdES STANDARD BASELINE STANDARD BASELINE STANDARD Read more…
CEF eSignature building block is very powerful tool. However it is daunting task to get started with it. Because of the complexity most of the smaller development agencies reject all project that has qualified electronic signature component. There are also Read more…
Technology Here is listed some of the tools, frameworks and technologies we are working to achieve secure user identification and creating digital signatures. Apache2 web server which has great built in support for Client Certificate Authentication. This means that it Read more…
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.