I am required to design a system where auditors can come along some time in the future, examine historic data, and be sure that the data has not changed since it was stored. I have a spec that instructs me to timestamp and sign the data when I store it, but I figure if I want to change the data in future, I can always regenerate the signature with the modified data and the original timestamp. Since the signature is generated with my certificate, there is nothing to stop me?
Any solution, it seems to me, must require that my signatures be timestamped and countersigned by a third party. In that way, a future auditor has a third party's word that the hash protecting a set of data genuinely is as old as it claims.
Do norms such as XAdES cater for this requirement? Can the certificate authority that issues my certificate date and countersign my signatures? Are there other online services that do this?