Questions tagged [trusted-timestamp]

Trusted timestamping is used to prove the existence of certain data before a certain point (e.g. contracts, inventions description,...) without the possibility that the owner can backdate the timestamps.

Trusted timestamping is used to prove the existence of certain data before a certain point (e.g. contracts, inventions description,...) without the possibility that the owner can backdate the timestamps.

The technique is based on digital signatures and hash functions.

According to the RFC 3161 standard, a trusted timestamp is a timestamp issued by a trusted third party (TTP) acting as a Time Stamping Authority (TSA). ANSI ASC X9.95 standard also requires the third party to prove that a reliable time source was used.

87 questions
1
vote
1 answer

Is timestaping signatures over HTTP vulnerable?

I'm using signtool to sign my windows binaries and using Digicert's timestamp server http://timestamp.digicert.com I noticed that most of the timestamp server are hosted on HTTP. Isn't it less secure than HTTPS? Are the timestamp responses signed…
GAR
  • 81
  • 4
1
vote
1 answer

Signed pdf missing timestamp from timestamp server

I try to digitally sign a pdf using an external web service. This web service contains the user certificate, which the user can access with their credentials and a one time password generated code. Sidenote: The web service is supposed to expect the…
iCantSeeSharp
  • 3,880
  • 4
  • 42
  • 65
1
vote
2 answers

git and Trusted Timestamps or DOI for private repo?

We are using git / github, and we have to be able to proof that a specific commit / tag was done before a specific time, we want to use Trusted Timestamp for this, as they seem to be the easiest way of achieving this. Another option would be a DOI,…
Rainer
  • 8,347
  • 1
  • 23
  • 28
1
vote
1 answer

How to determine Last write win on concurrent Vector clocks?

I'd like to keep track of only the recent data and also employ the help of Vector clocks in resolving issues so I can easily discard data via L-W-W rule.(last write wins) Say we have 3 nodes: - Node1 - Node2 - Node3 Then we would use Vector clocks…
1
vote
1 answer

Adobe Acrobat timestamp error

I'm testing an RFC 3161 Timestamp Server, and I'm using Foxit Reader, Xolido Sign Desktop and Adobe Acrobat Pro DC to timestamp PDFs. I can make timestamps ok with Foxit Reader and Xolido, but Adobe Acrobat returns "Error durante la firma. El nombre…
RobertGG
  • 75
  • 10
1
vote
0 answers

How to get timestamp from encrypted pdf (pdfbox, java)

I have to create a function that tells me is an uploaded PDF file encrypted-only, timestamped-only, none, or both. So far I am using PDFBox 2.0.5 and only success knowing timestamped-only and none file. Here is the current code: try{ InputStream…
1
vote
1 answer

Bouncycastle Java - Generate a tst file from TimestampToken

I am new on Bouncycastle. I can get timeStampToken from TSA server with http connection. InputStream in = con.getInputStream(); TimeStampResp resp = TimeStampResp.getInstance(new ASN1InputStream(in).readObject()); TimeStampResponse response = new…
mns45
  • 103
  • 7
1
vote
1 answer

Adding controls to Word's document actions pane results in E_FAIL

I have some controls I'm trying to add to the document actions pane for a custom template. Any time I do so, I get this error: System.Runtime.InteropServices.COMException (0x80004005): Error HRESULT E_FAIL has been returned from a call to a COM…
Chris
  • 3,400
  • 1
  • 27
  • 41
1
vote
2 answers

How to check if Java Web Start app will continue working after certificate expires

We signed our Java Web Start app with a code signing certificate from CA (Thawte). The signature is timestamped (we pass the -tca https://timestamp.geotrust.com/tsa argument to the jarsigner tool) to be valid after the certificate expires. At…
stepand76
  • 467
  • 6
  • 17
1
vote
1 answer

How to get TimeStamping Token and apply it to PDF file?

I'm trying to get a Time Stamping token from a server, and apply this token to a PDF file that will be signed later. I'm asking if someone has already works with a similar concept using java I have some information about the TimeStamping Authority…
Angelika
  • 23
  • 1
  • 11
1
vote
1 answer

Timestamp request with file hash already generated in client

I need to make a timpestamp request to a tsa of a large data file and so i am generating hash in client using javscript crypto-js. The problem comes when later in java i try to make the request. Apparently the method…
diegocr
  • 53
  • 5
1
vote
0 answers

Signing and timestamping at the same time VS signing and timestamping later

I'm building a digital signature module that must conform to EU digital signature directives. I'm starting from an old but well-working Java module to sign documents in CAdES format. Also, the application is made by a client (desktop JAR executable)…
usr-local-ΕΨΗΕΛΩΝ
  • 26,101
  • 30
  • 154
  • 305
1
vote
1 answer

Offline PDF timestamping using iText

is it possible to timestamp PDF document offline using iText or any other component? I've googled standard solution utilizing iText and TSAClient class but it requires TSA as online service. We have certificate from TSA (including private key)…
user3232054
  • 65
  • 1
  • 5
1
vote
2 answers

How to add timestamping signature to System.IO.Packaging.Package?

There is a way to create packages, add some parts and sign it with a X509Certificate. I would also like to add a timestamping signature to the package. If the certificate expires or gets revoked the signature should remain valid if the package…
Michael Damatov
  • 15,253
  • 10
  • 46
  • 71
1
vote
1 answer

Checking timestamp with iText 2.1.7

I am trying to check the existence of timestamp for a given signature of a PDF file. So far I came to this code: RandomAccessFileOrArray random = new RandomAccessFileOrArray(new File("temp.pdf").getAbsolutePath()); PdfReader reader = new…
mrcaramori
  • 2,503
  • 4
  • 29
  • 47