Questions tagged [trusted-timestamp]

Trusted timestamping is used to prove the existence of certain data before a certain point (e.g. contracts, inventions description,...) without the possibility that the owner can backdate the timestamps.

Trusted timestamping is used to prove the existence of certain data before a certain point (e.g. contracts, inventions description,...) without the possibility that the owner can backdate the timestamps.

The technique is based on digital signatures and hash functions.

According to the RFC 3161 standard, a trusted timestamp is a timestamp issued by a trusted third party (TTP) acting as a Time Stamping Authority (TSA). ANSI ASC X9.95 standard also requires the third party to prove that a reliable time source was used.

87 questions
1
vote
1 answer

Where is the certificate of a TSA stored in XAdES-T?

In XAdES-T, the -element contains the TimeStampToken received from a TSA and not the entire TimeStampResp. But this TimeStampToken does not contain the certificate of the TSA (which can be found in the SignerInfo of the…
Tommy Carlier
  • 7,951
  • 3
  • 26
  • 43
0
votes
1 answer

How does countersign in code signing work?

I don't understand at the moment how countersignings work. I'm thinking about is it possible to manipulate a file and resign it with the orginal key including a faked countersign? I'm using e.g.: signtool.exe sign /f "mycert.pfx" /t…
rekire
  • 47,260
  • 30
  • 167
  • 264
0
votes
0 answers

Inconsistent Signature Time using PDFBox

I am working on adding signature timestamp support using external TSAs while digitally signing the PDF. I am using PDFBox for my signature implementation. My steps are: Creating PDDocument and PDSignature instance. Adding appearance to the…
Qazazazaz
  • 11
  • 4
0
votes
0 answers

Is there any PDFBox sample to make Document Timestamp Signature as LTV enabled?

I am trying to implement Document Timestamp (a separate signature with type DocTimeStamp and SubFilter ETSI.RFC3161) and Signature Timestamps (timestamp token as unsigned attribute to current signature). I am trying to understand what all changes in…
0
votes
0 answers

Timestamp server for automated load testing

I'm looking for a timestamp server that will be safe to use for automated load testing. I need to test hundreds of users digitally signing files using a timestamp server. There are various free TSAs available but I'm afraid of having our auto…
0
votes
1 answer

How can I add an embedded timestamp to an existing digital signature that was issued by a TSP

I am trying to achieve PAdES digital signature with an embedded timestamp for a .pdf document. Namely, what I'm trying to achieve: DDS with an embedded timestamp I'm using a trusted provider (TSP; external party) that performs the DDS and therefore…
Omarsson
  • 3
  • 1
  • 2
0
votes
0 answers

Including timestamping authority when timestamping a PDF signature with PDFBox

I'm trying to add a timestamp to my signature on a PDF document using PDFBox 1.8.9. I'm getting errors saying the timestamp cannot be verified, and when I try to check the certificate of the timestamping authority it appears as "Not available". Here…
0
votes
1 answer

Can roughtime be used as a timestamp authority?

The roughtime protocol gives a secure timestamp right now. Can it be used as a timestamp authority, to sign a document and later prove that it existed before a certain time?
joeforker
  • 40,459
  • 37
  • 151
  • 246
0
votes
1 answer

Is there a way to perform a digital signature with a JSON format? Like XadES, but simpler

I'm signing documents and adding a timestamp seal using the XadES-T format. I think that a JSON format would simplify the signature and validation process, is there a way to sign documents and add a timestamp seal in JSON?
0
votes
0 answers

Blockchain Beginner: How do I validate my SHA-256 hash submission, by converting it to a blockchain.info address?

I really need help here ... I know this is simple ... but if someone could explain this like they are talking to a ten year old I'd appreciate it I converted a JPEG to SHA-256 I submitted that SHA-256 hash to the blockchain using origin stamp…
0
votes
1 answer

Extract timestamp information from signed PDF

I have thousands of PDF documents signed and timestamped with iText. For legal reasons, I now need to be able to extract from any PDF all data related to the timestamp (including date/time of course but also the TSA name, his public certificate, the…
Silas
  • 813
  • 1
  • 10
  • 18
0
votes
1 answer

setup signserver on mac get exception EJBCLIENT000025

I am searching for a long time on net. But no use. Please help or try to give some ideas how to achieve this. I follow the signserver install guide to install signserver on my mac,everything runs well,i can access the website, but when i execute…
0
votes
0 answers

Add timestamp to the PDF file with PDFBox

I am trying to add a TSA Timestamp to the pdf document using Apache PDFBox 2.0.8. this is the metod for setting up&process timestamping: @Override public void timestampPDFDocument() throws IOException, SignatureException, COSVisitorException { …
greengold
  • 1,184
  • 3
  • 18
  • 43
0
votes
1 answer

Passing username and password to CryptRetrieveTimeStamp function

I'm trying to retrieve a timestamp from a TSA using CryptRetrieveTimeStamp. I can get it from some of the free services found on this answer, but always using the TIMESTAMP_NO_AUTH_RETRIEVAL flag. But now that I want to use a paid service that uses…
Lucas Ayala
  • 2,309
  • 2
  • 16
  • 20
0
votes
1 answer

VRI for Signature TimeStamp

I've got a doubt about how to create the VRI entry for a timestamp that's inside a PAdES signature. Let's suppose there is a pdf document with a Signature and this signature has an embed timestamp. Example: \Sig [...] \Contents…