Arnis Parsovs is greatest single researcher who has found and helped to fix many security vulnerabilities around Estonian eID card scheme. I can only assume that other countries have all kinds of issues still present. Latest published discovery shows how …
Latvia is a Baltic country that is doing very well with digital identity and qualified electronic signatures. eID and eSignatures are widely used for accessing government systems, bank login and payment confirmations, logging to the utility companies, insurance companies, online …
This article explores how digital signatures in PDF work and how to digitally sign the PDF document when signature is created in remote app, device or service. In the end you will also find references that will help you implement …
XAdES – is eIDAS compliant flexible digital signature format in XML format. It has information of what kind of files are signed by whom. It can contain timestamp and OCSP. It can contain file references or even contents in the …
I have at hand Gemalto Safenet eToken with eIDAS Qualified Electronic Seal (also known as e-Seal or Digital Stamp or Document Signing Certificate) issued by SK ID Solutions. I want to sign sha256 hash with. First I will check some …
This article shows practical examples of how to generate and verify Elliptic curve (ECDSA) signatures using OpenSSL. Step 1. Create private and public EC keys Assuming we want to sign data in test.txt then we need to create hash and …
eIDAS standard can have multiple digital signature profiles. These mean how much proof is embedded into the signature metadata for later validation. Following table contains summary of supported eIDAS digital signature profiles XAdES CAdES PAdES STANDARD BASELINE STANDARD BASELINE STANDARD …
CEF eSignature building block is very powerful tool. However it is daunting task to get started with it. Because of the complexity most of the smaller development agencies reject all project that has qualified electronic signature component. There are also …
Technology Here is listed some of the tools, frameworks and technologies we are working to achieve secure user identification and creating digital signatures. Apache2 web server which has great built in support for Client Certificate Authentication. This means that it …
People are often confusing eID related topics that are not one and the same. Not knowing all the facts makes them scared of their privacy. Lets clarify some questions that I have seen people to be misunderstanding. Using national eID …
