OCSP-s, Timestamps, CRL-s and certificate data needs to be saved into the PDF for future digital signature validation. This is also called PAdES LTV or in eIDAS terminology PAdES-BASELINE-LT. In one of the previous posts about PAdES we examined how to create PAdES signature from scratch. We created ETSI.CAdES.detached and Read more…
Arnis Parsovs is greatest single researcher who has found and helped to fix many security vulnerabilities around Estonian eID card scheme. I can only assume that other countries have all kinds of issues still present. Latest published discovery shows how it is possible to login into freely chosen website that Read more…
Latvia is a Baltic country that is doing very well with digital identity and qualified electronic signatures. eID and eSignatures are widely used for accessing government systems, bank login and payment confirmations, logging to the utility companies, insurance companies, online alcohol shop age verification and many other applications. With eID Read more…
This article explores how digital signatures in PDF work and how to digitally sign the PDF document when signature is created in remote app, device or service. In the end you will also find references that will help you implement external PDF digital signatures. More details from ETSI 319 142-1 Read more…
XAdES – is eIDAS compliant flexible digital signature format in XML format. It has information of what kind of files are signed by whom. It can contain timestamp and OCSP. It can contain file references or even contents in the XML. More info here https://en.wikipedia.org/wiki/XAdES ASIC-E (.asice, .scs, .bdoc, .adoc, Read more…
eIDAS standard can have multiple digital signature profiles. These mean how much proof is embedded into the signature metadata for later validation. Following table contains summary of supported eIDAS digital signature profiles XAdES CAdES PAdES STANDARD BASELINE STANDARD BASELINE STANDARD BASELINE XAdES-BES XAdES-B CAdES-BES CAdES-B PAdES-BES PAdES-B XAdES-EPES CAdES-EPES PAdES-EPES Read more…
Technology Here is listed some of the tools, frameworks and technologies we are working to achieve secure user identification and creating digital signatures. Apache2 web server which has great built in support for Client Certificate Authentication. This means that it will request end user to present certificate from his ID Read more…
People are often confusing eID related topics that are not one and the same. Not knowing all the facts makes them scared of their privacy. Lets clarify some questions that I have seen people to be misunderstanding. Using national eID cards or others solutions do not have significant differences from Read more…
ID cards are Smart cards with a chip or NFC. They can be connected to computers or or other devices using a reader with special apps and drivers. Governments are usually providing these drivers, aka “eID Middleware“, to work with national ID cards. Browsers, where the web signing happens, can Read more…
If you found this page then chances are that you need to replace your DigiDocService integration immediately with more modern solutions. Unfortunately it is not most trivial task and might cost you decent amount of money and headache. Most companies with expertise in the field are big and well fed Read more…