https://yazilim.kamusm.gov.tr/eit-wiki/ 2026-05-01T11:18:19+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/ https://yazilim.kamusm.gov.tr/eit-wiki/lib/exe/fetch.php?media=favicon.ico text/html 2025-09-17T12:30:30+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:ana_sayfa&rev=1758112230&do=diff Introduction TÜBİTAK Kamu Sertifikasyon Merkezi (Kamu SM) plays an active role in the digital signature studies with its corporate identity, experience and expert team in its field and provides service according to the changing technology by following the international standards. Our goal is sharing the technology and knowledge of our institution to promote the development of digital signature technology in Turkey according to the international standards and to ensure the interoperability. text/html 2023-07-14T13:09:59+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:cades-a&rev=1689340199&do=diff CAdES-A General Information ES-A (Archival Electronic Signature) is the signature format that should be used in cases where signed documents need to be stored longer than the validity period of the certificate authority's root/sub-root, OCSP and timestamp certificates. text/html 2023-07-14T13:08:19+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:cades-t&rev=1689340099&do=diff CAdES-T General Information The ES-T (Electronic Signature with Time) signature is a type of signature that contains the timestamp information, which basically includes the BES signature and also signifies the date when the signature was legally created. The creation time of the signature is secured with a timestamp. Since the time for signature creation is guaranteed, if the certificate and signature are valid at the time the signature is created, the signature is also valid after the revocat… text/html 2025-09-17T12:30:32+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:cades&rev=1758112232&do=diff CAdES CADES (CMS Advanced Electronic Signature) is a CMS-based signature format defined in the ETSI 101 733 standard. CAdES signature is examined under two main sections. * Attached * Detached Attached Signature Signed content is encapsulated by the signature. text/html 2023-07-14T13:07:43+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:cades_bes&rev=1689340063&do=diff CAdES-BES General Information BES (Basic Electronic Signature) signature is the most basic signature type. There is no trusted time information that guarantees the date of signature creation. [CAdES BES] The lifetime of the BES signature is up to the lifetime of the end entity certificate. The signature cannot be verified after the certificate has expired or the certificate has been revoked. For this reason, timestamping of the BES signature is extremely important. Time information in the BE… text/html 2025-09-17T12:30:31+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:cades_p3_x-long&rev=1758112231&do=diff P3 CAdES-X LONG General Information “Long-term and CRL Controlled Secure Electronic Signature Policies (Profile P3)” is defined by Information and Communication Technologies Authority (ICTA) in Electronic Signature Usage Profiles which is a guide of signature profiles for Turkey. In this profile, long term compatibility is provided with ES-X LONG and ES-A signature formats. In addition, this profile requires the use of text/html 2025-09-11T11:42:36+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:cades_p4_x-long&rev=1757590956&do=diff P4 CAdES-X LONG General Information “Long-term and OCSP-based Secure Electronic Signature Policies (Profile P4)” is defined by Information and Communication Technologies Authority (ICTA) in Electronic Signature Usage Profiles which is a guide of signature profiles for Turkey. In this profile, long term compatibility is provided with ES-X LONG and ES-A signature formats. In addition, this profile requires the use of text/html 2023-07-14T13:09:07+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:cades_x-long&rev=1689340147&do=diff CAdES-X LONG General Information The ES-X LONG signature is based on the ES-T signature. In addition to the ES-T signature, it includes the root and sub-root certificates of the certificate authority and the CRL and OCSP responses for signature verification. This enables the signature to be validated for a long period of time. text/html 2025-09-11T11:42:43+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:e-yazisma_guncelleme_paketi_yapisi&rev=1757590963&do=diff e-Correspondence Update Package Structure The e-Correspondence Update Package is created to ensure that the changes that need to be made to the original e-Correspondence Package are kept without disrupting the package structure. The following table specifies the components of the e-Correspondence Update Package. text/html 2025-09-11T11:42:59+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:e-yazisma_paketi&rev=1757590979&do=diff e-Correspondence Package Introduction The e-Correspondence Package (ECP) is a package structure that is designed to carry out the official correspondence between public institutions and organizations in an electronic environment. The information and components of official letters turn into a single electronic file by specific rules with text/html 2025-09-11T11:42:58+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:e-yazisma_paketi_yapisi&rev=1757590978&do=diff e-Correspondence Package Structure ECP consists of components related to the document and package structure that are logically connected. The table below lists the ECP components. M/O Package Components MCover LetterMMetadataMFinal MetadataOParaph Hash text/html 2025-09-11T11:42:41+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:ebys_uygulamalari&rev=1757590961&do=diff EDMS Applications Electronic Document Management System (EDMS) is the general name of the comprehensive software that brings the processes of producing, delivering, signing, archiving and disposing of corporate documents into the electronic environment. text/html 2025-09-11T11:43:00+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:eyp_arsivleme&rev=1757590980&do=diff ECP Archival In ECP applications, the archiving infrastructure should be provided. Comprehensive information about archiving can be found in section Signature Archival. Since the Electronic Seal component in the packages created with ECP 2.0 and 2.1 versions is in the archive signature format, other electronic signature components of the P3/P4 text/html 2025-09-11T11:42:38+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:eyp_sifreleme&rev=1757590958&do=diff ECP Encryption With the regulation numbered 2017/21, it is also possible to send official letters transmitted electronically in encrypted form. In order to increase the security of the e-Correspondence Package during transmission, the content of the package can be encrypted. The encryption mechanism is designed to prevent third parties from accessing the content of the package. In the encryption process, the original e-Correspondence Package is placed in a new outer OPC package in encrypted f… text/html 2025-09-11T11:42:51+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:eyp_uygulamalari&rev=1757590971&do=diff ECP Applications e-Correspondence Project is the system that provides the flow of official documents between public institutions and organizations. The system allows the digital creation of documents in the sending institution and opening them in the receiving institution. The package that contains the official letter to be transmitted between the institutions is called the e-Correspondence Package ( text/html 2025-09-17T12:30:32+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:imza_arsivleme&rev=1758112232&do=diff Signature Archival The trust in electronic signature technology depends on the signing of any validation data used in signature by a trusted authority and the strength of the cryptographic algorithms used in signing against the existing attacks. Computational capabilities of computers are determinative in the power of cryptographic attacks. Therefore, a signature which is created today is open attacks when the life of cryptographic algorithms used in it expires. Malevolent people with the abil… text/html 2025-09-11T11:42:35+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:imza_dogrulama&rev=1757590955&do=diff Signature Validation This section has been created to test the conformity of the signature validation applications to the international standards and includes the signature formats CAdES, XAdES and PAdES which are defined by ETSI. The CAdES, XAdES and PAdES sections provide general descriptions of the relevant signature formats, the structure of the subtypes, and test packages for each signature type. text/html 2021-02-26T13:05:06+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:imza_olusturma&rev=1614344706&do=diff Signature Creation This section has been created to test the compliance of signature creation applications to the standards. It comprises of the following sections: * Certificate Validation * Timestamp Validation * Bulk Signing Certificate Validation section includes scenarios which may occur during the certificate validation phase. text/html 2025-09-11T11:42:56+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:kisaltmalar_ve_tanimlar&rev=1757590976&do=diff ABBREVIATIONS BES Basic Electronic SignatureCA Certificate AuthorityCAdES CMS Advanced Electronic SignatureCMS Cryptographic Message SyntaxCRLCertificate Revocation ListCWA CEN (Comité Européen De Normalisation) Workshop AgreementECPElectronic Correspondence Package text/html 2025-09-17T12:30:33+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:kriptografik_suit&rev=1758112233&do=diff Cryptographic Suite General Information Cryptographic algorithms are weakening day by day and there is a need to transition to new algorithms. RSA algorithm is used for signature creation in the current structure. The RSA algorithm was one of the first public key cryptography algorithms developed by Ron Rivest, Adi Shamir and Leonard Adleman in 1977. Although the RSA algorithm is still secure, the use of elliptic curves in cryptography is increasing and the elliptic curves play an important ro… text/html 2023-07-14T13:00:24+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:on_hazirlik&rev=1689339624&do=diff Preparation This section has been created to indicate the requirements to be fulfilled by the institution as a preparation for conformity assesment. The conformity assesment process consists of four sections: format control of the digital signature, signature creation, validation, and archiving tests. In order to carry out the conformity assessment tests in detail, Test Suite prepared by Kamu SM is used. text/html 2025-09-17T12:30:34+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p3_cades-a&rev=1758112234&do=diff P3 CAdES-A General Information “Long-term and CRL Controlled Secure Electronic Signature Policies (Profile P3)” is defined by Information and Communication Technologies Authority (ICTA) in Electronic Signature Usage Profiles which is a guide of signature profiles for Turkey. In this profile, long term compatibility is provided with ES-X LONG and ES-A signature formats. In addition, this profile requires the use of text/html 2025-09-17T12:30:34+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p3_guncelleme_paketler&rev=1758112234&do=diff Profile 3 (P3) Update Packages This section has been created to test the compliance of ECP files with various standards. The structural features of the ECP 2.1 should be conformed with “e-Correspondence Technical Guide”. Signatures in the package must comply with the text/html 2025-09-11T11:42:46+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p3_paketler&rev=1757590966&do=diff Profile 3 (P3) Packages This section has been created to test the compliance of ECP files with various standards. The structural features of the ECP should be conformed with “e-Correspondence Technical Guide”. Signatures in the package must comply with the text/html 2025-09-11T11:42:35+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p4_cades-a&rev=1757590955&do=diff P4 CAdES-A General Information “Long-term and OCSP-based Secure Electronic Signature Policies (Profile P4)” is defined by Information and Communication Technologies Authority (ICTA) in Electronic Signature Usage Profiles which is a guide of signature profiles for Turkey. In this profile, long term compatibility is provided with ES-X LONG and ES-A signature formats. In addition, this profile requires the use of text/html 2025-09-17T12:30:35+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p4_guncelleme_paketler&rev=1758112235&do=diff Profile 4 (P4) Update Packages This section has been created to test the compliance of ECP files with various standards. The structural features of the ECP 2.1 should be conformed with “e-Correspondence Technical Guide”. Signatures in the package must comply with the text/html 2023-07-14T13:21:22+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p4_pades_lt-level&rev=1689340882&do=diff P4 PAdES LT-Level General Information Long-term and OCSP-based Secure Electronic Signature Policies (Profile P4) is defined by Information and Communication Technologies Authority (ICTA) in Electronic Signature Usage Profiles which is a guide of signature profiles for Turkey. In this profile, long term compatibility is provided with LT-Level and LTA-Level signature formats. In addition, this profile requires the use of text/html 2023-07-14T13:22:03+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p4_pades_lta-level&rev=1689340923&do=diff P4 PAdES LTA-Level General Information Long-term and OCSP-based Secure Electronic Signature Policies (Profile P4) is defined by Information and Communication Technologies Authority (ICTA) in Electronic Signature Usage Profiles which is a guide of signature profiles for Turkey. In this profile, long term compatibility is provided with LT-Level and LTA-Level signature formats. In addition, this profile requires the use of text/html 2025-09-12T06:15:25+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p4_paketler&rev=1757657725&do=diff Profile 4 (P4) Packages This section has been created to test the compliance of ECP files with various standards. The structural features of the ECP should be conformed with “e-Correspondence Technical Guide”. Signatures in the package must comply with the text/html 2023-07-14T12:55:44+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p4_xades-a&rev=1689339344&do=diff P4 XAdES-A General Information Long-term and OCSP-based Secure Electronic Signature Policies (Profile P4) is defined by Information and Communication Technologies Authority (ICTA) in Electronic Signature Usage Profiles which is a guide of signature profiles for Turkey. In this profile, long term compatibility is provided with ES-X LONG and ES-A signature formats. In addition, this profile requires the use of text/html 2023-07-14T12:55:44+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:p4_xades-x_long&rev=1689339344&do=diff P4 XAdES-X LONG (Type 1) General Information Long-term and OCSP-based Secure Electronic Signature Policies (Profile P4) is defined by Information and Communication Technologies Authority (ICTA) in Electronic Signature Usage Profiles which is a guide of signature profiles for Turkey. In this profile, long term compatibility is provided with ES-X LONG and ES-A signature formats. In addition, this profile requires the use of text/html 2025-09-17T12:30:36+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:pades&rev=1758112236&do=diff PAdES PAdES (PDF Advanced Electronic Signature) is a PDF-based signature format defined in ETSI 102 778 (1-6). PDF allows the signature to be embedded in the document itself rather than being created as separate data. The signature obtained by signing the PDF content is added to the Signature Dictionary field, which is reserved for signature in the PDF. text/html 2023-07-14T13:14:51+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:pades_b-type&rev=1689340491&do=diff PAdES B-Level General Information B-Level signature is the most basic signature type. There is no trusted time information that guarantees the date of creation of the signature. [PAdES B-Level] The lifetime of the BES signature is up to the life of the end entity certificate. The signature cannot be verified after the certificate has expired or the certificate has been revoked. For this reason, timestamping of the BES signature is extremely important. text/html 2023-07-14T13:15:27+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:pades_lt-type&rev=1689340527&do=diff PAdES LT-Level General Information The LT-Level signature is based on the T-Level signature. In addition to T-Level signature, it includes the root and sub-root certificates of the certification authority and the CRL and OCSP responses for signature verification. This enables the signature to be validated for a long period of time. text/html 2023-07-14T13:20:40+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:pades_lta-type&rev=1689340840&do=diff PAdES LTA-Level General Information LTA-Level signature is the signature format that should be used in cases where signed documents need to be stored longer than the validity period of the certificate authority's root/sub-root, OCSP and timestamp certificates. text/html 2025-09-17T12:30:37+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:projeler&rev=1758112237&do=diff Applications “Digital Signature Conformity Assessment Service” is the process of assessing the conformance of the applications that can create and/or validate digital signature with the international technical standards in the digital signature legislation. In order to ensure the interoperability of the digital signature applications, which have a technical framework with the Regulation on the Electronic Signature Law No. 5070 and the Rules and Procedures for the Implementation of the Electroni… text/html 2020-08-11T12:48:43+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:sertifika_kontrolue&rev=1597150123&do=diff Certificate Validation Digital certificate is an electronic attestation which links a signature verification data to a person, and confirms the identity of that person [Dir. 1999/93/EC]. Signature creation applications must perform validity checks of the signer certificate prior to the signing. These checks are not only limited to the signer certificate but also include validity checks of the text/html 2025-09-11T11:42:45+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:sidebar&rev=1757590965&do=diff * INTRODUCTION * ABBREVIATIONS AND DEFINITIONS * PREPARATION * SIGNATURE CREATION * Certificate Validation * Timestamp Validation * Bulk Signing * SIGNATURE VALIDATION * CAdES * CAdES-BES * CAdES-T * CAdES-X LONG * CAdES-A * P4 CAdES-X LONG * P4 CAdES-A * P3 CAdES-X LONG * P3 CAdES-A * PAdES * PAdES B-Level * PAdES LT-Level * PAdES LTA-Level * P4 PAdES LT-Level * P4 PAdE… text/html 2023-07-14T13:01:42+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:toplu_imzalama&rev=1689339702&do=diff Bulk Signing Bulk signing is a signing method that enables multiple documents to be signed electronically in a legally valid signature format in accordance with the Electronic Signature Law No. 5070. It can be used to prevent the prolongation of business processes caused by the signing of the documents individually. It is a way that is as secure as a signing process in which each document is signed separately. text/html 2023-07-14T12:55:45+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:xades-a&rev=1689339345&do=diff XAdES-A General Information ES-A (Archival Electronic Signature) is the signature format that should be used in cases where signed documents need to be stored longer than the validity period of the certificate authority's root/sub-root, OCSP and timestamp certificates. text/html 2023-07-14T12:55:46+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:xades-t&rev=1689339346&do=diff XAdES-T General Information The ES-T (Electronic Signature with Time) signature is a type of signature that basically covers the BES signature and additionally includes the timestamp information that legally indicates the date of signature creation. The timestamp secures the time at which the signature is created. If the certificate and signature are valid at the time the signature is created, the certificate is valid after the revocation or expiration, since the time for signature creation is… text/html 2025-09-17T12:30:37+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:xades&rev=1758112237&do=diff XAdES XAdES (XML Advanced Electronic Signature) is an XML-based signature format defined in the ETSI 101 903 standard. The XAdES signature results in an XML file. The XML file can display the signature properties and content in sections. XAdES Signature Structures: text/html 2023-07-14T12:55:46+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:xades_bes&rev=1689339346&do=diff XAdES-BES General Information BES (Basic Electronic Signature) signature is the most basic signature type. There is no trusted time information that guarantees the date of creation of the signature. The lifetime of the BES signature is up to the life of the end entity certificate. The signature cannot be verified after the certificate has expired or the certificate has been revoked. For this reason, timestamping of the BES signature is extremely important. Time information in the BES signatu… text/html 2023-07-14T12:55:47+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:xades_x-long&rev=1689339347&do=diff XAdES-X LONG (Type 1) General Information ES-X LONG Type 1 (Extended Long Electronic Signature with Time Type 1) signature is based on the ES-T signature. In addition to ES-T signature, it includes the root and sub-root certificates of the certification authority and the text/html 2022-12-05T08:55:47+00:00 https://yazilim.kamusm.gov.tr/eit-wiki/doku.php?id=en:zaman_damgas%C4%B1&rev=1670230547&do=diff Timestamp The timestamp (TS) refers to the record verified by the TSP with the electronic signature to determine when an electronic data is generated, modified, sent, received and/or recorded. Its purpose is proof of time. The signature timestamp used in the signature specifies the signature creation date and it is mandatory for long-term digital signatures. For this reason, the applications that create a signature with a timestamp (at least ES-T) must check the timestamp validity during the s…