Here is a quick overview of how documents can or must be created and signed in the European Union based on the Estonian Civil Code Act. Since EU law is quite similar then most of this applies in rest of the EU countries as well. Law in Estonian is in Read more…
Is your company currently using a document management system but still downloading, signing and uploading documents back into the cloud? With over 70% of market share, chances are that you are using something like Microsoft’s Sharepoint since it is one of the most popular document management systems for large corporates. Read more…
European Digital Identity wallet is in the process of finalizing technical specifications. Among the main goals the wallet must be able to: Create qualified electronic signatures Contain and allow sharing “electronic attestiations of attributes” about the person At the same time we have all the building blocks already available and Read more…
eID Easy helps businesses adopt strong and Qualified Electronic Signatures (QES). We work with Trust Service Providers (TSPs) and integrate their service into the businesses workflows. With eID Easy as a trusted integration partner the TSP has an easier sales process and faster time to close the deal. What kind Read more…
Arnis Parsovs is greatest single researcher who has found and helped to fix many security vulnerabilities around Estonian eID card scheme. I can only assume that other countries have all kinds of issues still present. Latest published discovery shows how it is possible to login into freely chosen website that Read more…
This article explores how digital signatures in PDF work and how to digitally sign the PDF document when signature is created in remote app, device or service. In the end you will also find references that will help you implement external PDF digital signatures. More details from ETSI 319 142-1 Read more…
XAdES – is eIDAS compliant flexible digital signature format in XML format. It has information of what kind of files are signed by whom. It can contain timestamp and OCSP. It can contain file references or even contents in the XML. More info here https://en.wikipedia.org/wiki/XAdES ASIC-E (.asice, .scs, .bdoc, .adoc, Read more…
I have at hand Gemalto Safenet eToken with eIDAS Qualified Electronic Seal (also known as e-Seal or Digital Stamp or Document Signing Certificate) issued by SK ID Solutions. I want to sign sha256 hash with. First I will check some general information about the keypair. We need token label(or slot=8 Read more…
This article shows practical examples of how to generate and verify Elliptic curve (ECDSA) signatures using OpenSSL. Step 1. Create private and public EC keys Assuming we want to sign data in test.txt then we need to create hash and sign the hash. In many cases we have digest value Read more…
eIDAS standard can have multiple digital signature profiles. These mean how much proof is embedded into the signature metadata for later validation. Following table contains summary of supported eIDAS digital signature profiles XAdES CAdES PAdES STANDARD BASELINE STANDARD BASELINE STANDARD BASELINE XAdES-BES XAdES-B CAdES-BES CAdES-B PAdES-BES PAdES-B XAdES-EPES CAdES-EPES PAdES-EPES Read more…