Which XAdES profile?

John Haug johnhaug at exchange.microsoft.com
Wed Apr 23 20:04:44 CEST 2014

Agree.  Further, my understanding is that, from a format perspective, any XAdES profile may be used if a file supports use of XML-DSig.  It's up to an implementation to support various profiles.  I believe Microsoft Office supports up through -X-L but not -A, which is why MS-OFFCRYPTO discusses it.  I'd think that ODF the format would allow an implementation to use -A even without specifically discussing additional requirements to place on use of XAdES in ODF files.  I'd assume the same for OOXML.  Again, since OOXML supports XML-DSig and XAdES uses built-in extensibility, OOXML should automatically allow for the use of all profiles of XAdES.  Whether we want to apply specific requirements on its use to guarantee a certain level of information in a signed file is open to discussion.


-----Original Message-----
From: Jirka Kosek [mailto:jirka at kosek.cz] 
Sent: Wednesday, April 23, 2014 12:31 AM
To: MURATA Makoto
Cc: SC34
Subject: Re: Which XAdES profile?

On 23.4.2014 6:47, MURATA Makoto wrote:
> XAdES has quite a few profiles.  Which one should
> 29500-2 support?
> Both ODF 1.2 Part 3 and [MS-OFFCRYPTO] appear 
> to use the XAdES-X-L profile.  This is because neither 
> mention ArchiveTimeStamp (which is specific to the 
> biggest profile XAdES-A) but both mention 
> CertificateValues (which is specific to XAdES-X-L).
> Regards,
> Makoto

Ideally anything up to XAdES-A should be supported, so user can choose level of signature security and longevity. In some countries for some use specific level of XAdES is prescribed.


  Jirka Kosek      e-mail: jirka at kosek.cz      http://xmlguru.cz
       Professional XML consulting and training services
  DocBook customization, custom XSLT/XSL-FO document processing
 OASIS DocBook TC member, W3C Invited Expert, ISO JTC1/SC34 rep.
    Bringing you XML Prague conference    http://xmlprague.cz

More information about the sc34wg4 mailing list