Questions tagged [eidas]
eIDAS is an EU regulation concerning electronic identification. Its formal name is "Regulation (EU) N°910/2014 on electronic identification and trust services for electronic transactions in the internal market".
9
questions
0
votes
0answers
38 views
Is a timestamp of hash(hash(document)) valid under eIDAS?
I have a document F that I don't have access to, but I have its hash H'(F) calculated with an algorithm H' that is not included in the list of recommended hash functions in EN 119 312 (referenced by ...
1
vote
0answers
191 views
What is the difference between PKCS#7 and CADES, PADES and XADES?
I am newbie in PKI. For signing a pdf documents we are free to consider each pkcs#7 format or PADES format. If I have some misunderstandings, please turn it on for me.
0
votes
0answers
61 views
Is it possible to build an ASiC container out of a file and its timestamp token? [duplicate]
If I have:
A file, X
The RFC3161 timestamp token of X
Are these sufficient to build a (single file) ASiC container with the file and the timestamp?
In other words, is the timestamp included in the ...
2
votes
2answers
257 views
How to validate that a EU List of Trusted Lists is authentic?
In order to validate if a trust service is qualified, one should search for the public key in a member state trusted list (TL).
In order to validate if a member state TL is authentic, one should ...
1
vote
0answers
50 views
Use of ESSCertIDv2 in a RFC 3161 Timestamp
A qualified trust service provider under eIDAS uses ESSCertIDv2 for their time stamp tokens, but ESSCertIDv2 was not present in the RFC 3161 specification, it was added later in RFC 5816.
RFC 3161 in ...
2
votes
1answer
142 views
Does the ECDSA signature value (of an OCSP response) need to be DER encoded
In OCSP responses by a certain eIDAS PKI I every once in a while get signature values which, when unpacked from their BIT STRING, contain an ECDSA signature whose INTEGER constituents have an ...
1
vote
2answers
705 views
How to timestamp a document without electronic signature under eIDAS
I need to timestamp a file to prove data integrity, not authorship. I will use a RFC3161 qualified timestamping service.
From the EU Regulation Section 6, Article 41, I understand that I can use a ...
3
votes
1answer
621 views
Is HelloSign actually compliant with EU Regulation 910/2014 (eIDAS)? [closed]
EDIT
I added the full replies I got from HelloSign. These may perhaps help someone more expert than I am to determine if they actually provide an AdES signature. Please note that I also asked ...
0
votes
1answer
2k views
eIDAS - list of certified qualified electronic signature creation devices
In eIDAS there is written in Article 31:
On the basis of the information received, the Commission shall establish, publish and maintain a list of certified qualified electronic signature ...
