ESYAE-imza Kütüphaneleri

Bu sayfa salt okunur. Kaynağı görebilirsiniz ama değiştiremezsiniz. Bunun yanlış olduğunu düşünüyorsanız yöneticiye danışın.

<h2>Signature Profiles</h2> <div class="level2"> <p> The lifetime of an electronic signature to be created must be determined beforehand. The required signature profile changes according to the lifetime and verification requirements. </p> <span class='np_break'> </span> <div class="table"><table class="inline"> <tr class="row0"> <td class="col0"> Profil </td><td class="col1"> Signature Lifetime </td><td class="col2"> Timestamp </td><td class="col3"> Revocation Info </td><td class="col4"> Finalization Time </td><td class="col5"> Signature Format </td><td class="col6 leftalign"> Signature File Size </td> </tr> <tr class="row1"> <td class="col0"> P1 </td><td class="col1"> Instant </td><td class="col2"> Absent </td><td class="col3"> CRL/ OCSP </td><td class="col4"> Not applied </td><td class="col5"> BES </td><td class="col6 leftalign"> Small </td> </tr> <tr class="row2"> <td class="col0"> P2 </td><td class="col1"> Short </td><td class="col2"> Exists </td><td class="col3"> CRL </td><td class="col4"> Applied </td><td class="col5"> ES-T </td><td class="col6 leftalign"> Medium </td> </tr> <tr class="row3"> <td class="col0"> P3 </td><td class="col1"> Long </td><td class="col2"> Exists </td><td class="col3"> CRL </td><td class="col4"> Applied </td><td class="col5"> ES-XL </td><td class="col6 leftalign"> Very Large </td> </tr> <tr class="row4"> <td class="col0"> P4 </td><td class="col1"> Long </td><td class="col2">Exists </td><td class="col3"> OCSP </td><td class="col4"> Applied </td><td class="col5"> ES-XL </td><td class="col6 leftalign"> Large </td> </tr> </table> <span class='np_break'> </span> </div> </div> <h3>P1 - Instant- Signature Profile</h3> <div class="level3"> <p> The applications where signatures' lifetime is shorter than the time when the next revocation information for the signing certificate is published should use this profile. For example, when CRLs are published at every 4 hours, instant signatures can have lifetimes from a few minutes up to 4 hours. When the security requirement is low or for a very limited time signatures of this profile can be used.The signing time is accepted as the time when the signature document reaches the recipient. It sohul be preferred in cases that no future verification of the signature is required. There is no policy reference included in this profile </p> </div> <h3>P2 - Shortterm- Signature Profile</h3> <div class="level3"> <p> The applications where signatures' lifetime is shorter than the remaining time for the validity of the signing certificate shoul use this profile. Shortterm signatures can have lifetime at most the lifetime of the signature certificates. This profile should be preferred where no OCSP access is available. When OCSP is available, P4 signature profile should be used. </p> </div> <h3>P3 - Longterm - Signature Profile</h3> <div class="level3"> <p> This profile can be used when the signature lifetime is longer than the signatures of P1 and P2 profiles. The verification information is included in the signature document. </p> <p> P3 signature profile can be used when OCSP access is not available. Otherwise using this profile has no advantage over P4 which requires much smaller file size. Very large signature file size and the requirement for waiting the next CRL to be published make this profile non-preferred. </p> </div> <h3>P4 - Longterm- Signature Profile</h3> <div class="level3"> <p> Like P3, this profile can also be used when the signature lifetime is longer than the signatures of P1 and P2 profiles. The verification information is included in the signature document. </p> <p> P4 is the most secure, longterm, and practical signature profile which requires OCSP access. </p> </div>