Timestamps and Hashes

View: New views
2 Messages — Rating Filter:   Alert me  

Timestamps and Hashes

by mkl :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi!

When I looked at PdfPKCS7.java, I found:

// When requested, go get and add the timestamp. May throw an exception.
// Added by Martin Brunecky, 07/12/2007 folowing Aiken Sam, 2006-11-15
// Sam found Adobe expects time-stamped SHA1-1 of the encrypted digest
if (tsaClient != null) {
    byte[] tsImprint = MessageDigest.getInstance("SHA-1").digest(digest);
Is SHA-1 actually still required by Adobe? The information from Sam might be a bit outdated, especially as SHA-1 is not really state-of-the-art anymore...

Regards,   Michael.

Re: Timestamps and Hashes

by Leonard Rosenthol-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

No, SHA1 is not required and in fact with Acrobat 9 we now default to SHA256.

Leonard

-----Original Message-----
From: mkl [mailto:mkl@...]
Sent: Monday, June 29, 2009 10:33 AM
To: itext-questions@...
Subject: [iText-questions] Timestamps and Hashes


Hi!

When I looked at PdfPKCS7.java, I found:



> // When requested, go get and add the timestamp. May throw an exception.
> // Added by Martin Brunecky, 07/12/2007 folowing Aiken Sam, 2006-11-15
> // Sam found Adobe expects time-stamped SHA1-1 of the encrypted digest
> if (tsaClient != null) {
>     byte[] tsImprint = MessageDigest.getInstance("SHA-1").digest(digest);
>

Is SHA-1 actually still required by Adobe? The information from Sam might be
a bit outdated, especially as SHA-1 is not really state-of-the-art
anymore...

Regards,   Michael.
--
View this message in context: http://www.nabble.com/Timestamps-and-Hashes-tp24255283p24255283.html
Sent from the iText - General mailing list archive at Nabble.com.


------------------------------------------------------------------------------
_______________________________________________
iText-questions mailing list
iText-questions@...
https://lists.sourceforge.net/lists/listinfo/itext-questions

Buy the iText book: http://www.1t3xt.com/docs/book.php
Check the site with examples before you ask questions: http://www.1t3xt.info/examples/
You can also search the keywords list: http://1t3xt.info/tutorials/keywords/

------------------------------------------------------------------------------
_______________________________________________
iText-questions mailing list
iText-questions@...
https://lists.sourceforge.net/lists/listinfo/itext-questions

Buy the iText book: http://www.1t3xt.com/docs/book.php
Check the site with examples before you ask questions: http://www.1t3xt.info/examples/
You can also search the keywords list: http://1t3xt.info/tutorials/keywords/