Estándares

Conjunto de estándares y recomendaciones de seguridad:

  • IETF - Internet Engineering Task Force
    • RFC 5280, RFC 3280: Internet X.509 Public Key Infrastructure. Certificate and Certificate Revocation List (CRL)
    • RFC 3739, RFC 3039: Internet X.509 Public Key Infrastructure. Qualified Certificates Profile
    • RFC 2560: Internet X.509 Public Key Infrastructure. Online Certificate Status Protocol (OCSP)
    • RFC 3161: Internet X.509 Public Key Infrastructure. Time-Stamp Protocol (TSP)
    • RFC 5652, RFC 3852: Cryptographic Message Syntax (CMS)
    • RFC 4511: Lightweight Directory Access Protocol (LDAP): The Protocol
    • RFC 3778: The application/pdf Media Type
    • RFC 2865: Remote Authentication Dial In User Service (RADIUS)
  • PKCS - Public Key Cryptography Standards
    • PKCS #1 RSA Cryptography Standard
    • PKCS #5 Password-Based Cryptography Standard
    • PKCS #7 Cryptographic Message Syntax Standard
    • PKCS #10 Certification Request Syntax Standard
    • PKCS #11 Cryptographic Token Interface Standard
    • PKCS #12 Personal Information Exchange Syntax Standard
  • ITU-T and ISO/IEC
    • ITU-T Recommendation X.509 | ISO/IEC 9594-8: “Information Technology – Open Systems Interconnection – The Directory: Public-Key and Attribute Certificate Frameworks“
    • ISO 32000-1, Document management – Portable document format – Part 1: PDF 1.7
  • ETSI - European Telecommunications Standards Institute
    • ETSI TS 101 862: Qualified Certificate Profile
    • ETSI TS 102 280: X.509 V.3 Certificate Profile for Certificates Issued to Natural Persons
    • ETSI TS 102 176-1: Algorithms and Parameters for Secure Electronic Signatures; Part 1: Hash functions and asymmetric algorithms
    • ETSI TS 101 733: CMS Advanced Electronic Signatures (CAdES)
    • ETSI TS 101 861: Time stamping profile
    • ETSI TS 101 903: XML Advanced Electronic Signatures (XAdES)
    • ETSI TS 102 778-1: PDF Advanced Electronic Signature Profiles;Part 1: PAdES Overview - a framework document for PAdES
    • ETSI TS 102 778-2: PDF Advanced Electronic Signature Profiles;Part 2: PAdES Basic - Profile based on ISO 32000-1
    • ETSI TS 102 778-3: PDF Advanced Electronic Signature Profiles;Part 3: PAdES Enhanced - PAdES-BES and PAdES-EPES Profiles
    • ETSI TS 102 778-4: PDF Advanced Electronic Signature Profiles;Part 4: PAdES Long Term - PAdES LTV Profile
  • W3C - World Wide Web Consortium
    • XML Digital Signature WG (XML-DSig)
    • XML Encryption WG (XML-Enc)
    • XML Key Management Working Group (XKMS)
  • OASIS Organization for the Advancement of Structured Information Standards
    • OASIS Web Services Security (WS-Security)
    • OASIS Digital Signature Services (DSS)
    • OASIS Security Assertion Markup Language (SAML)
  • ICAO - International Civil Aviation Organization
    • Machine Readable Travel Documents. Part 1: Machine Readable Passports. Volume 2: Specifications for Electronically Enabled Passports with Biometric Identification Capability
  • BSI - Bundesamt für Sicherheit in der Informationsthechnik
    • Technical Guideline TR-03110. Advanced Security Mechanisms for Machine Readable Travel Documents – Extended Access Control (EAC)