ETSI TS 101 733 V2.1.1 (2012-03) Technical Specification Electronic Signatures and Infrastructures (ESI); CMS Advanced Electronic Signatures (CAdES) 2 ETSI TS 101 733 V2.1.1 (2012-03) Reference RTS/ESI-000119 Keywords CAdES, e-commerce, electronic signature, security ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N° 348 623 562 00017 - NAF 742 C Association à but non lucratif enregistrée à la Sous-Préfecture de Grasse (06) N° 7803/88 Important notice Individual copies of the present document can be downloaded from: http://www.etsi.org The present document may be made available in more than one electronic version or in print. In any case of existing or perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http://portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment to one of the following services: http://portal.etsi.org/chaircor/ETSI_support.asp Copyright Notification No part may be reproduced except as authorized by written permission. The copyright and the foregoing restriction extend to reproduction in all media. © European Telecommunications Standards Institute 2012. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTM and the ETSI logo are Trade Marks of ETSI registered for the benefit of its Members. 3GPPTM and LTE™ are Trade Marks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM® and the GSM logo are Trade Marks registered and owned by the GSM Association. ETSI 3 ETSI TS 101 733 V2.1.1 (2012-03) Contents Intellectual Property Rights ................................................................................................................................ 7 Foreword ............................................................................................................................................................. 7 Introduction ........................................................................................................................................................ 7 1 Scope ........................................................................................................................................................ 8 2 References ................................................................................................................................................ 9 2.1 Normative references ......................................................................................................................................... 9 2.2 Informative references ...................................................................................................................................... 10 3 Definitions and abbreviations ................................................................................................................. 12 3.1 Definitions ........................................................................................................................................................ 12 3.2 Abbreviations ................................................................................................................................................... 13 4 Overview ................................................................................................................................................ 15 4.1 Major Parties .................................................................................................................................................... 15 4.2 Signature Policies ............................................................................................................................................. 16 4.3 Electronic Signature Formats ........................................................................................................................... 16 4.3.1 CAdES Basic Electronic Signature (CAdES-BES) .................................................................................... 17 4.3.2 CAdES Explicit Policy-based Electronic Signatures (CAdES-EPES) ........................................................ 18 4.4 Electronic Signature Formats with Validation Data ......................................................................................... 19 4.4.1 Electronic Signature with Time (CAdES-T) ............................................................................................... 19 4.4.2 ES with Complete Validation Data References (CAdES-C) ...................................................................... 20 4.4.3 Extended Electronic Signature Formats ...................................................................................................... 21 4.4.3.1 EXtended Long Electronic Signature (CAdES-X Long) ...................................................................... 22 4.4.3.2 EXtended Electronic Signature with Time Type 1 (CAdES-X Type 1) ............................................... 22 4.4.3.3 EXtended Electronic Signature with Time Type 2 (CAdES-X Type 2) ............................................... 23 4.4.3.4 EXtended Long Electronic Signature with Time (CAdES-X Long Type 1 or 2) .................................. 23 4.4.4 Archival Electronic Signature (CAdES-A) ................................................................................................. 24 4.4.5 Long-Term Electronic Signature (CAdES-LT) .......................................................................................... 24 4.5 Arbitration ........................................................................................................................................................ 25 4.6 Validation Process ............................................................................................................................................ 25 5 Electronic Signature Attributes .............................................................................................................. 25 5.1 General Syntax ................................................................................................................................................. 26 5.2 Data Content Type............................................................................................................................................ 26 5.3 Signed-data Content Type ................................................................................................................................ 26 5.4 SignedData Type .............................................................................................................................................. 26 5.5 EncapsulatedContentInfo Type ........................................................................................................................ 26 5.6 SignerInfo Type ................................................................................................................................................ 27 5.6.1 Message Digest Calculation Process........................................................................................................... 27 5.6.2 Signature Generation Process ..................................................................................................................... 27 5.6.3 Signature Verification Process .................................................................................................................... 27 5.7 Basic ES Mandatory Present Attributes ........................................................................................................... 27 5.7.1 content-type ................................................................................................................................................ 27 5.7.2 Message Digest ........................................................................................................................................... 27 5.7.3 Signing Certificate Reference Attributes .................................................................................................... 28 5.7.3.1 ESS signing-certificate Attribute Definition ......................................................................................... 28 5.7.3.2 ESS signing-certificate-v2 Attribute Definition .................................................................................... 28 5.7.3.3 Other signing-certificate Attribute Definition ....................................................................................... 29 5.8 Additional Mandatory Attributes for Explicit Policy-based Electronic Signatures .......................................... 29 5.8.1 signature-policy-identifier .......................................................................................................................... 29 5.9 CMS Imported Optional Attributes .................................................................................................................. 31 5.9.1 signing-time ................................................................................................................................................ 31 5.9.2 countersignature .........................................................................................................................................