Short version:
How to implement the following dictionaries:
(1) DSS (Digital Security Store);
(2) VRI (Validation Related Information); and
(3) Document Timestamp dictionary
defined in ETSI TS 102 778-4 and needed for managing Long Term Validation
(LTV) of PAdES signatures, and signature policies, in an Adobe
Acrobat/Reader plugin?
Long Version:
We are working on an Adobe Acrobat plugin to generate and validate digital
signatures in the format PAdES for PDF documents according to the Brazilian
Public Key Infrastructure (ICP-Brasil) ETSI-compliant standards. These
standards require the use of three types of ETSI-compliant PDF dictionaries
that do not appear to be supported by the PubSec API parameters. These
dictionaries are the DSS (Digital Security Store), the VRI (Validation Related
Information) and the Document Timestamp dictionary which are necessary for
managing Long Term Validation (LTV) of PAdES signatures. These three
dictionaries are in defined in ETSI TS 102 778-4
The ICP-Brasil standards also require the utilization of Signature Policies
(according to ETSI TR 102 272) which also use the DSS and the VRI
dictionaries mentioned above.
The issue we present here for discussion is that the Adobe PubSec interface,
as well as the DigSig interface, (to the best of our knowledge) do not support
these dictionaries (DSS, VRI and Doc Timestamp). Therefore, how should we
proceed to implement the plugin we are working on so that it may support
LTV and Signature Policies?
We would be very happy to receive advice from the Adobe SDK community
on this issue. And would be eager to know whether the SDK has another API
that provides the additional support mentioned above (LTV and Sig Policies),
or if we are missing something important in the PubSec API that provides
this support.
AdChoices