Questions tagged [eidas]

eIDAS is an EU regulation concerning electronic identification. Its formal name is "Regulation (EU) N°910/2014 on electronic identification and trust services for electronic transactions in the internal market".

7 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
0 answers
1k views

What is the difference between PKCS#7 and CADES, PADES and XADES?

I am newbie in PKI. For signing a pdf documents we are free to consider each pkcs#7 format or PADES format. If I have some misunderstandings, please turn it on for me.
user avatar
  • 41
1 vote
0 answers
99 views

Certificate generation using Advanced Electronic Signature (AdES)

For a mobile application I would like to be so compliant as possible with the AdES standard. The mobile application will perform operations on behalf of the user, signing them first. A backend ...
user avatar
  • 143
1 vote
1 answer
157 views

Use of ESSCertIDv2 in a RFC 3161 Timestamp

A qualified trust service provider under eIDAS uses ESSCertIDv2 for their time stamp tokens, but ESSCertIDv2 was not present in the RFC 3161 specification, it was added later in RFC 5816. RFC 3161 in ...
user avatar
  • 373
0 votes
1 answer
75 views

Looking for a solution: trusted identity with corresponding digital signatures (QES) for intercontinental charity

We are looking for a solution to meet the needs of a UK incorporated charity (CIO) that has three to seven trustees from at least three continents. Obligations as trustees of a board include signing (...
user avatar
  • 605
0 votes
0 answers
38 views

I think there's an implementation bug in my eID (eIDAS) when preparing to change the PIN; is it?

I had to renew my eID card. Possessing an EAL-4+ certified card reader (cyberJack RFID komfort by REINER SCT) I tried to activate the ID function by replacing the transport PIN with a personal PIN. ...
user avatar
  • 127
0 votes
0 answers
113 views

eIDAS qualified timestamp on email

Every document that needs to be eIDAS compliant needs to have a qualified timestamp. If we take an email as a document, then the email, based on eIDAS regulations, needs to have an qualified timestamp ...
user avatar
0 votes
0 answers
74 views

x509 validation check service

I would like to check validity of x509 certificates of my clients. I would like to trust the certificates what big companies trust. For example I would like to trust what Microsoft Edge, Chrome ...
user avatar