Arnis Parsovs is greatest single researcher who has found and helped to fix many security vulnerabilities around Estonian eID card scheme. I can only assume that other countries have all kinds of issues still present. Latest published discovery shows how it is possible to login into freely chosen website that Read more…
This article explores how digital signatures in PDF work and how to digitally sign the PDF document when signature is created in remote app, device or service. In the end you will also find references that will help you implement external PDF digital signatures. More details from ETSI 319 142-1 Read more…
XAdES – is eIDAS compliant flexible digital signature format in XML format. It has information of what kind of files are signed by whom. It can contain timestamp and OCSP. It can contain file references or even contents in the XML. More info here https://en.wikipedia.org/wiki/XAdES ASIC-E (.asice, .scs, .bdoc, .adoc, Read more…
I have at hand Gemalto Safenet eToken with eIDAS Qualified Electronic Seal (also known as e-Seal or Digital Stamp or Document Signing Certificate) issued by SK ID Solutions. I want to sign sha256 hash with. First I will check some general information about the keypair. We need token label(or slot=8 Read more…
This article shows practical examples of how to generate and verify Elliptic curve (ECDSA) signatures using OpenSSL. Step 1. Create private and public EC keys Assuming we want to sign data in test.txt then we need to create hash and sign the hash. In many cases we have digest value Read more…
eIDAS standard can have multiple digital signature profiles. These mean how much proof is embedded into the signature metadata for later validation. Following table contains summary of supported eIDAS digital signature profiles XAdES CAdES PAdES STANDARD BASELINE STANDARD BASELINE STANDARD BASELINE XAdES-BES XAdES-B CAdES-BES CAdES-B PAdES-BES PAdES-B XAdES-EPES CAdES-EPES PAdES-EPES Read more…
CEF eSignature building block is very powerful tool. However it is daunting task to get started with it. Because of the complexity most of the smaller development agencies reject all project that has qualified electronic signature component. There are also big players with big budgets who can help you. For Read more…
ID cards are Smart cards with a chip or NFC. They can be connected to computers or or other devices using a reader with special apps and drivers. Governments are usually providing these drivers, aka “eID Middleware“, to work with national ID cards. Browsers, where the web signing happens, can Read more…
Every country must make sure its citizens have secure way of identifying online and creating qualified digital signatures Estonia is a country that has managed to build digital society with everything in right place and extremely high digital eID usage so nobody is left behind. When COVID-19 virus hit then Read more…