CryptoAPI signature and electronic stamp

It is the most advanced electronic signature/seal component on the market. It has the ability to create and validate AdES signatures [ETSI EN 319 102-1]. It has been developed in accordance with Article 27, paragraphs 1 and 2, of Regulation (EU) 910/2014, including the electronic signature in XML, CMS and PDF documents at the conformance level B, T or LT.

This API, unlike other ones existing on the market such as Bouncy Castle, Open SSL, etc., strictly complies with the technical and legal standards of the EU, and has been audited in accordance with eIDAS Regulation. It allows developers to incorporate advanced electronic signature and recognized electronic signature processes in local applications and web services, with a guarantee of 100% interoperability in eIDAS validation platforms.

Interoperability

Available for Linux, Windows and Android operating systems

Development languages: it is functional with all international platforms.

Applications

Integration of electronic signature in vertical, local and remote applications (Web service).

parallax background

Associated signature/stamp containers available




Besides, it offers the possibility of including ASiC signature / stamp, in accordance with ETSI EN 319 162.

Signature Attributes (drop-down)

This cryptographic component incorporates the communications protocol necessary to establish secure transactions with the Time Stamping Units and OCSP Responders of ANF AC, obtaining qualified electronic time stamp and status validation response of the certificate used in the signing process. These attributes are incorporated into the signature / stamp according to the reference standards: TimeStamp RFC 3161 and OCSP RFC 6960.

Furthermore, ANF AC´s API Signature has the ability to incorporate an identifier of a specific Signature Policy.

The timestamp, the OCSP responses and the signature policy of ANF AC, have been audited in accordance with eIDAS Regulation.



Modalities of available formats

The API of ANF AC has the ability to include signature / stamp attributes, obtaining different levels of security according to the new Baseline formats.


tabla comparativad de niveles antiguos del estándar y nuevos Baseline
Comparative table recording old and new levels of the Baseline standard


Technical characteristics
  • B = Basic electronic signature. It only contains SignedInfo, SignatureValue, KeyInfo and Signed Properties. This level combines the old levels -BES and -EPES.
  • T = Signature that includes a TimeStamp. TimeStamp is included at the time of signature as protection from non-repudiation
  • LT = Long term signature. In addition to the TimeStamp, the status verification data of the certificate and OCSP query are included, allowing future verification even if the original source is not available. This level is equivalent to the old -XL.
  • LTA = Signature with Long Term Data and Archive. It allows new TimeStamp to be included in order to guarantee the preservation of the signature, even if there are risks of validity of cryptographic components. This level is equivalent to the old -A.
Qualified signature / electronic seal validation

It is essential to verify all the components of an electronic signature / stamp, to offer legal certainty about its validity. This is an obligation that the recipient of the signatures must assume before trusting them and logically, the signature service used by the issuer of the signature must ensure that is able to be verify it later.

ANF AC is one of the few PCSCs that have achieved the accreditation in order to provide qualified signature/ stamp service in accordance with articles 32 and 40 of the eIDAS Regulation.

The API Signature of ANF AC incorporates all the logic necessary to perform the validation operations and even establish real-time communication with the European TSLs to carry out the verification in accordance with ETSI TS 119 172-4, and according to ETSI TS 119 612 [ESI - Trusted Lists].

Documentation and engineering support

This component has detailed documentation that facilitates its use by developers. ANF Certification Authority guarantees its partners engineering support and expert knowledge in the field, both from a technical and legal point of view.

Updates
ANF Certification Authority assumes responsibility for carrying out all necessary updates to maintain regulatory and legal compliance in the event of changes that may occur.

For more information, please fill out the form below or contact our customer service.


    English