Digital signature issues on the table

[MURATA Makoto]

Dear colleagues,


Yesterday, JNSA had a meeting to discuss issues around
XAdES in OPC.  Here is a quick summary (I will prepare
a longer version).

1) DSig version: 1.1?

1.1 only

2) Canonicalization algorithms?

Must support 1.0, 1.1, and ExcC14N without comments,
should support 1.0, 1.1, and ExcC14N with comments,

3) XAdES Version: EN or TS? (EN only)

EN only

4) Which spec from ETSI?

Part 1 of XAdES as well as AdES

5) New relationship type for XAdES EN digital signatures part?

No.  Implementations should be able to distinguish new and
old XAdES signatures.

6) SignatureTime of OPC?

Do not use SignatureTime  for display or validation when there is
a time stamp.  Clearly show to users whether a time stamp or SignatureTime
is used.


Regards,
Makoto



2015-12-20 16:13 GMT+09:00 MURATA Makoto <eb2m-mrt at asahi-net.or.jp>:

> Folks,
>
> JNSA and the Japanese mirror plan to provide a detailed proposal for
> the intrudction of XAdES into OPC.  While preparing for this proposal,
> we are also reconsidering OPC digital signatures in general.
>
> Here is a list of issues on our table now.  My two cents are
> parenthesized.
>
> 1) DSig version: 1.1? (1.1 only)
>
> 2) Canonicalization algorithms?  (1.0, 1.1, and ExcC14N)
>
> 3) XAdES Version: EN or TS? (EN only)
>
> 4) Which spec from ETSI?  (Part 1 of XAdES as well as AdES)
>
> 5) New relationship type for XAdES EN digital signatures part? (Yes)
>
> 6) SignatureTime of OPC?  (Disallowed in XAdES EN digital signatures)
>
>
>
> --
> Regards,
>
> Makoto
>



-- 

Praying for the victims of the Japan Tohoku earthquake

Makoto
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.vse.cz/pipermail/sc34wg4/attachments/20160122/6ee2016e/attachment.html>