ETSI TS 119 102-1 V1.2.1 (2018-08)

Electronic Signatures and Infrastructures (ESI); Procedures for Creation and Validation of AdES Digital Signatures; Part 1: Creation and Validation

ETSI TS 119 102-1 V1.2.1 (2018-08)

Name:ETSI TS 119 102-1 V1.2.1 (2018-08)   Standard name:Electronic Signatures and Infrastructures (ESI); Procedures for Creation and Validation of AdES Digital Signatures; Part 1: Creation and Validation
Standard number:ETSI TS 119 102-1 V1.2.1 (2018-08)   language:English language
Release Date:30-Aug-2018   technical committee:ESI - Electronic Signatures and Infrastructures
Drafting committee:   ICS number:
ETSI TS 119 102-1 V1.2.1 (2018-08)






TECHNICAL SPECIFICATION
Electronic Signatures and Infrastructures (ESI);
Procedures for Creation and Validation
of AdES Digital Signatures;
Part 1: Creation and Validation

---------------------- Page: 1 ----------------------
2 ETSI TS 119 102-1 V1.2.1 (2018-08)



Reference
RTS/ESI-0019102-1-TSversion
Keywords
electronic signature, security, trust services
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: +33 4 92 94 42 00  Fax: +33 4 93 65 47 16

Siret N° 348 623 562 00017 - NAF 742 C
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° 7803/88

Important notice
The present document can be downloaded from:

The present document may be made available in electronic versions and/or in print. The content of any electronic and/or
print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any
existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the
print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at

If you find errors in the present document, please send your comment to one of the following services:

Copyright Notification
No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying
and microfilm except as authorized by written permission of ETSI.
The content of the PDF version shall not be modified without the written authorization of ETSI.
The copyright and the foregoing restriction extend to reproduction in all media.

© ETSI 2018.
All rights reserved.

TM TM TM
DECT , PLUGTESTS , UMTS and the ETSI logo are trademarks of ETSI registered for the benefit of its Members.
TM TM
3GPP and LTE are trademarks of ETSI registered for the benefit of its Members and
of the 3GPP Organizational Partners.
oneM2M logo is protected for the benefit of its Members.

GSM and the GSM logo are trademarks registered and owned by the GSM Association.
ETSI

---------------------- Page: 2 ----------------------
3 ETSI TS 119 102-1 V1.2.1 (2018-08)
Contents
Intellectual Property Rights . 7
Foreword . 7
Modal verbs terminology . 7
Introduction . 7
1 Scope . 8
2 References . 8
2.1 Normative references . 8
2.2 Informative references . 9
3 Definitions and abbreviations . 10
3.1 Definitions . 10
3.2 Abbreviations . 13
4 Signature creation . 13
4.1 Signature creation model . 13
4.2 Signature creation information model . 15
4.2.1 Introduction. 15
4.2.2 Signature Creation Constraints . 16
4.2.3 Signer's document (SD) . 16
4.2.4 Signer's document representation (SDR) . 17
4.2.5 Signature attributes . 17
4.2.5.1 General requirements . 17
4.2.5.2 Signing certificate identifier . 17
4.2.5.3 Signature policy identifier . 18
4.2.5.4 Signature policy store . 18
4.2.5.5 Data content type . 18
4.2.5.6 Commitment type indication . 18
4.2.5.7 Counter signatures . 19
4.2.5.8 Claimed signing time . 19
4.2.5.9 Claimed signer location . 19
4.2.5.10 Signer's attributes . 19
4.2.6 Data to be signed (DTBS) . 19
4.2.7 Data to be signed (formatted) (DTBSF) . 20
4.2.8 Data to be signed representation (DTBSR) . 20
4.2.9 Signature . 20
4.2.10 Signed data object (SDO) . 20
4.2.11 Validation data . 20
4.3 Signature Classes and Creation Processes . 21
4.3.1 Introduction. 21
4.3.2 Creation of Basic Signatures . 22
4.3.2.1 Description . 22
4.3.2.2 Inputs . 22
4.3.2.3 Outputs . 22
4.3.2.4 Processing . 23
4.3.2.4.1 Selection of documents to sign . 23
4.3.2.4.2 Signature attribute and parameters selection . 23
4.3.2.4.3 Pre-signature presentation . 23
4.3.2.4.4 Signature invocation . 24
4.3.2.4.5 Signing. 24
4.3.2.4.6 Signer authentication . 24
4.3.2.4.7 SDO composition . 24
4.3.3 Creation of a Signature with Time . 25
4.3.3.1 Description . 25
4.3.3.2 Inputs . 25
4.3.3.3 Outputs . 25
4.3.3.4 Process . 25
ETSI

---------------------- Page: 3 ----------------------
4 ETSI TS 119 102-1 V1.2.1 (2018-08)
4.3.4 Creation of Signatures with Long-Term Validation Material . 26
4.3.4.1 Description . 26
4.3.4.2 Inputs . 26
4.3.4.3 Outputs . 26
4.3.4.4 Process . 27
4.3.5 Creation of Signatures providing Long Term Availability and Integrity of Validation Material . 27
4.3.5.1 Description . 27
4.3.5.2 Inputs . 28
4.3.5.3 Outputs . 28
4.3.5.4 Process . 28
5 Signature validation . 28
5.1 Signature validation model . 28
5.1.1 General requirements . 28
5.1.2 Selecting validation processes . 31
5.1.3 Status indication of the signature validation process and signature validation report. 32
5.1.4 Validation constraints . 38
5.1.4.1 General requirements . 38
5.1.4.2 X.509 Validation Constraints . 39
5.1.4.3 Cryptographic Constraints . 39
5.1.4.4 Signature Elements Constraints . 39
5.2 Basic building blocks . 39
5.2.1 Description . 39
5.2.2 Format Checking . 40
5.2.2.1 Description . 40
5.2.2.2 Inputs . 40
5.2.2.3 Outputs . 40
5.2.3 Identification of the signing certificate . 40
5.2.3.1 Description . 40
5.2.3.2 Inputs . 40
5.2.3.3 Outputs . 40
5.2.3.4 Processing . 40
5.2.4 Validation context initialization . 41
5.2.4.1 Description . 41
5.2.4.2 Inputs . 41
5.2.4.3 Outputs . 41
5.2.4.4 Processing . 42
5.2.5 Revocation freshness checker . 42
5.2.5.1 Description . 42
5.2.5.2 Inputs . 42
5.2.5.3 Output . 43
5.2.5.4 Processing . 43
5.2.6 X.509 certificate validation . 43
5.2.6.1 Description . 43
5.2.6.2 Inputs . 44
5.2.6.3 Outputs . 44
5.2.6.4 Processing . 44
5.2.7 Cryptographic verification . 46
5.2.7.1 Description . 46
5.2.7.2 Inputs . 46
5.2.7.3 Outputs . 47
5.2.7.4 Processing . 47
5.2.8 Signature acceptance validation (SAV) . 47
5.2.8.1 Description . 47
5.2.8.2 Inputs . 48
5.2.8.3 Outputs . 48
5.2.8.4 Processing . 48
5.2.8.4.1 General requirements . 48
5.2.8.4.2 Processing AdES attributes . 49
5.2.9 Signature validation presentation building block . 50
5.3 Validation process for Basic Signatures . 51
5.3.1 Description . 51
ETSI

---------------------- Page: 4 ----------------------
5 ETSI TS 119 102-1 V1.2.1 (2018-08)
5.3.2 Inputs . 51
5.3.3 Outputs . 51
5.3.4 Processing . 51
5.4 Time-stamp validation building block . 53
5.4.1 Description . 53
5.4.2 Inputs . 54
5.4.3 Outputs . 54
5.4.4 Processing . 54
5.5 Validation process for Signatures with Time and Signatures with Long-Term Validation Material . 54
5.5.1 Description . 54
5.5.2 Inputs . 55
5.5.3 Outputs . 55
5.5.4 Processing . 55
5.6 Validation process for Signatures providing Long Term Availability and Integrity of Validation
Material . 58
5.6.1 Introduction. 58
5.6.2 Additional building blocks . 58
5.6.2.1 Past certificate validation . 58
5.6.2.1.1 Description . 58
5.6.2.1.2 Input . 59
5.6.2.1.3 Output . 59
5.6.2.1.4 Processing . 59
5.6.2.2 Validation time sliding process . 60
5.6.2.2.1 Description . 60
5.6.2.2.2 Input . 60
5.6.2.2.3 Output . 60
5.6.2.2.4 Processing . 60
5.6.2.3 POE extraction . 62
5.6.2.3.1 Description . 62
5.6.2.3.2 Input . 62
5.6.2.3.3 Output . 62
5.6.2.3.4 Processing . 62
5.6.2.4 Past signature validation building block . 63
5.6.2.4.1 Description . 63
5.6.2.4.2 Input . 63
5.6.2.4.3 Output . 63
5.6.2.4.4 Processing . 63
5.6.3 Validation Process for Signatures providing Long Term Availability and Integrity of Validation
Material . 64
5.6.3.1 Description . 64
5.6.3.2 Input . 64
5.6.3.3 Output . 64
5.6.3.4 Processing . 65
Annex A (informative): Validation examples . 68
A.1 General remarks and assumptions . 68
A.2 Symbols . 68
A.3 Example 1: Revoked certificate . 69
A.3.1 Introduction . 69
A.3.2 Basic signature validation . 69
A.3.3 Validating a Signature with Time . 70
A.3.4 Example 2: Revoked CA certificate . 70
A.3.5 Basic signature validation . 71
A.3.6 Validation of a Signature with Time . 71
A.3.7 Long-Term Validation . 72
An
...

  • Relates Information
  • ISO 8130-9:1992

    ISO 8130-9:1992 - Coating powders
    09-28
  • EN 352-2:2020/FprA1

    EN 352-2:2021/oprA1:2023
    09-28
  • IEC TS 61158-4:1999

    IEC TS 61158-4:1999 - Digital data communications for measurement and control - Fieldbus for use in industrial control systems - Part 4: Data Link protocol specification Released:3/24/1999 Isbn:2831847656
    09-28
  • HD 566 S1:1990

    HD 566 S1:1998
    09-28
  • ISO 5131:1982/Amd 1:1992

    ISO 5131:1982/Amd 1:1992
    09-28
  • EN 60598-2-22:1990

    EN 60598-2-22:1996
    09-27
  • ISO 8504-2:1992

    ISO 8504-2:1992 - Preparation of steel substrates before application of paints and related products -- Surface preparation methods
    09-27
  • EN 12165:2024

    prEN 12165:2022
    09-27
  • IEC TS 61158-6:1999

    IEC TS 61158-6:1999 - Digital data communications for measurement and control - Fieldbus for use in industrial control systems - Part 6: Application Layer protocol specification Released:3/24/1999 Isbn:2831847613
    09-27
  • ISO 4252:1992

    ISO 4252:1992 - Agricultural tractors -- Operator's workplace, access and exit -- Dimensions
    09-27