Implementace dlouhodobého elektronického podpisu

Abstract

Today there exist two standards for electronic sigatures. None of them is discussing validity of signature in long period of time. This problem is solved by CAdES standard, described in ETSI TS 101 733 or RFC 5126. Presenty there is no satisfying implementation of CAdES standard. The aim of this diploma work is to analyse and implement CAdES standard using open-source library OpenSSL. The work begins with introduction of PKI standards and problem of electronic signatures. The work continues with analyses of CAdES standard and analyses of the implementation of CAdES standard. Finally, this work is describing the implementation of standard CAdES using OpenSSL library and also possiblities of further development. A part of the implementation is a command line utility that allows users to create and verify long term signatures according to CAdES standard easily. The implementation was created with respect to possibility of extending current OpenSSL distribution.