{"id":30532,"date":"2018-12-27T11:47:16","date_gmt":"2018-12-27T10:47:16","guid":{"rendered":"https:\/\/www.viafirma.com\/?post_type=faq&p=30532"},"modified":"2024-05-09T14:06:49","modified_gmt":"2024-05-09T12:06:49","slug":"cades-advanced-electronic-signature","status":"publish","type":"faq","link":"https:\/\/www.viafirma.com\/en\/faqs\/cades-advanced-electronic-signature\/","title":{"rendered":"CAdES (CMS Advanced Electronic Signature)"},"content":{"rendered":"
CAdES (CMS Advanced Electronic Signatures)<\/strong> it\u2019s a set of database extensions signed with Cryptographic Message Syntax (CMS) suitable for the advanced electronic signature.While the CMS format is a CAdES-T (timestamp)<\/strong>,a general framework to digitally sign documents like E-Mail (S \/ MIME) or PDF, CAdES specifies accurate data profiles signed with CMS <\/strong>to be used with the advanced electronic signature in the European Directive 1999\/93\/CE.An important advantage of the CAdES format is that electronically signed documents can still be valid after long periods of time<\/strong> even if the underlying cryptographic algorithms are broken.The main document describing this format is the ETSI TS 101 733 Electronic Signature and Infrastructure (ESI) \u2013 CMS Advanced Electronic Signature (CAdES).<\/p>\n

The CAdES format has 6 different profiles defined<\/strong>, depending on the level of protection offered. Each profile includes and upgrades the previous one. Currently, at Viafirma, we support up to the CAdES-T profile:<\/strong><\/p>\n

    \n
  • \n

    CAdES<\/strong><\/h2>\n

    Basic form that simply meets the Directive legal requirements for the advanced e-signature<\/strong><\/li>\n

  • \n

    CAdES-T (timestamp<\/em>)<\/strong><\/h2>\n

    The time-stamped field is incorporated into it to protect the data from possible repudiation.<\/li>\n

  • \n

    CAdES-C (complete<\/em>)<\/strong><\/h2>\n

    It is a CAdES-T to which references about the certificates and revocation lists<\/strong> are added and used to allow offline validation and verification in the future (without storing the current verification data).<\/li>\n

  • \n

    CAdES-X (extended<\/em>)<\/strong><\/h2>\n

    It is a CAdES-C to which information about the date and time<\/strong> of the data entered for extension C is added.<\/li>\n

  • \n

    CAdES-X-L (extended long-term<\/em>)<\/strong><\/h2>\n

    It is a CAdES-X to which certificates<\/strong> (public key only) and validation sources<\/strong> are incorporated. Ensures long-term off-line validation even if the original source is not available.<\/li>\n

  • \n

    CAdES-A (archived<\/em>)<\/strong><\/h2>\n

    This format includes all the above but includes meta-information regarding re-signaturing policies. A re-signaturing policy establishes an expiry date of the digital signature and afterwards the re-signaturing process begins. The ideal scenario for this signature format are those documents with a very long validity period: mortgages, university titles, deeds, etc. 15, 20, 50 years, etc.<\/li>\n<\/ul>\n<\/section>\n