Electronic Signatures and Infrastructures (ESI); CAdES digital signatures; Part 1: Building blocks and CAdES baseline signatures

Note

ETSI standard specifying CAdES signatures, built on CMS signatures, and the baseline CAdES signature formats, version 1.3.1.

Summary

Purpose

European standard ETSI EN 319 122-1 (version 1.3.1, June 2023) defines CAdES, a digital signature format built on the CMS syntax (Cryptographic Message Syntax) ETSI EN 319 122-1 V1.3.1, § 1 Scope ETSI EN 319 122-1 V1.3.1, History. Its scope begins as follows:

It sets the signed and unsigned attributes added to a CMS signature, and “baseline” signatures in four levels. The procedures for creation, augmentation and validation fall under another standard, ETSI EN 319 102-1 ETSI EN 319 122-1 V1.3.1, § 1 Scope ETSI EN 319 102-1 V1.4.1.

Who it applies to

• Member States that require an advanced electronic signature or seal for an online service offered by, or on behalf of, a public sector body: they must recognise the formats in Annex I to Implementing Regulation 2026/248, including CAdES Art. 1(1) Art. 3(1) Annex I Art. 27(1) Art. 37(1).
• Signature creation applications of wallets, for which CAdES is an optional format Annex IV.
• Providers of qualified electronic ledgers, to establish the origin of data records List of technical specifications and reference standards for qualified distributed electronic ledgers.

Key points

• CMS basis: CAdES adds to a CMS signature attributes that meet common needs, such as long-term validity ETSI EN 319 122-1 V1.3.1, § 1 Scope.
• Four levels: B-B (attributes added at signing), B-T (token proving that the signature existed at a given time), B-LT (validation data included) and B-LTA (time stamps that allow validation long afterwards) ETSI EN 319 122-1 V1.3.1, § 6.1 Signature levels.
• Framework targeted: the standard states that it targets in particular the simple, advanced or qualified electronic signatures and seals of Regulation 910/2014 ETSI EN 319 122-1 V1.3.1, § 1 Scope.

What the acts apply, and how

• Implementing Regulation 2026/248: Member States that require an advanced electronic signature (or one based on a qualified certificate) recognise those that meet the specifications in Annex I; the same rule applies to seals Art. 1(1) Art. 3(1). Annex I names the whole standard, in version 1.3.1, without adaptation Annex I. These two paragraphs apply from 23 February 2027 Art. 6. For signatures and seals created before 23 February 2028, Member States also recognise the former profile ETSI TS 103 173 v.2.2.1, with the exception of its clause 9 and at levels B, T or LT Art. 1(2) Art. 3(2) Annex II ETSI TS 103 173 V2.2.1. The regulation repeals Implementing Decision 2015/1506 Art. 5 Implementing Decision (EU) 2015/1506.
• Implementing Regulation 2024/2979: Annex IV lists CAdES among the optional formats; the only mandatory format is PAdES Annex IV ETSI EN 319 142-1 V1.2.1. Signature creation applications must produce at least the mandatory format Art. 12(2).
• Implementing Regulation 2025/2531 (qualified electronic ledgers): the standard is reached through ETSI EN 319 401 version 3.1.1, which the annex adapts. Under requirement REQ-7.5-03, providers establish the origin of data records by means of advanced signatures or seals based on qualified certificates, created by the users of the service in accordance with CAdES 1.3.1, XAdES 1.3.1 or JAdES List of technical specifications and reference standards for qualified distributed electronic ledgers ETSI EN 319 401 V3.1.1. Under Regulation 910/2014, compliance of an electronic ledger with the requirements laid down in paragraph 1 of the article cited is presumed where it complies with the standards, specifications and procedures referred to in paragraph 3 Art. 45l(2).
• Implementing Regulation 2025/2162: Annex II cites EN 319 122-1, without a version, for the recording of electronic data in a qualified electronic ledger; scheme owners ensure that their conformity assessment schemes include at least these standards, as applicable, with their year and version number Annex II Art. 6(3).

Important clauses

• ETSI EN 319 122-1 V1.3.1, § 1 Scope: scope.
• ETSI EN 319 122-1 V1.3.1, § 5 Attribute semantics and syntax: CAdES attributes.
• ETSI EN 319 122-1 V1.3.1, § 6 CAdES baseline signatures: baseline signatures and levels.

Links

• Related standards: XAdES ETSI EN 319 132-1 V1.3.1, PAdES ETSI EN 319 142-1 V1.2.1, ASiC containers ETSI EN 319 162-1 V1.1.1.
• Learning path: step 4, trust services.

ETSI standard: the site reproduces only short extracts; the full text is available from ETSI ETSI EN 319 122-1 V1.3.1. Written by Asphalia.