TrustAssert

Open-source implementation

Digital Signature Service (DSS)

DSS provides substantial standards-based signature functionality, but production use still needs architecture, policy and secure operating decisions.

Last reviewed
Scope
European Commission DSS open-source library

An open-source signature library

Digital Signature Service (DSS) is a Java library maintained through the European Commission’s DIGITAL programme. It provides implementation support for advanced electronic-signature creation, augmentation and validation, including PAdES, XAdES, CAdES and ASiC formats.

DSS is a library and reference implementation, not a hosted trust service and not a legal opinion. Its demonstrations help users explore functionality but are not a substitute for a production architecture.

What it can provide

Creation

Data preparation, signature parameters, token integration and format-specific processing.

Augmentation

Addition of timestamps and validation material to supported signature formats.

Validation

Standards-based processing with diagnostic, detailed and simple reports.

Trust data

Components for certificates, revocation sources, trusted lists and validation policy.

What an implementation still needs to decide

  • Supported use cases, formats, levels and validation policies
  • Trust anchors, trusted-list sources and data-loader controls
  • Certificate and revocation-source retrieval, caching and failure behaviour
  • Signing-key custody and integration with creation devices or services
  • Security boundaries, input controls, dependency management and patching
  • How detailed validation results become stable business outcomes
  • Evidence retention, monitoring, test coverage and operational support
  • Upgrade and regression strategy as DSS and its standards evolve

Start with the requirement

Need a clearer route forward?

Set out the service, jurisdiction, standards or policy documents involved and the decision that needs to be made.

Contact TrustAssert