Skip to main content

Module archive

Module archive 

Source
Expand description

CAdES archive-time-stamp-v3 and its ats-hash-index-v3 (ETSI EN 319 122-1 V1.3.1 §5.5).

An archive-time-stamp-v3 is an unsigned attribute of a signer whose value is a time-stamp token. That token’s own signer carries one ats-hash-index-v3: the hashes of the root SignedData certificates, revocation values and the signer’s unsigned attribute values the time-stamp protects. The token’s message imprint covers the content type, the content hash, the signer’s signed fields and that index.

token_reader yields the token of the attribute, HashIndex::of_token reads its index, check_index matches the index entries against the original elements, and imprint_input gives the ranges the token’s imprint is checked over. Which archive time-stamps a level requires, and trust, stay with the caller.

Structs§

AttributeValue
One unsigned attribute value of the archived signer.
HashIndex
One ATSHashIndexV3 value (EN 319 122-1 §5.5.2), in its original DER.
IndexCoverage
What an ats-hash-index-v3 protects in the root SignedData and signer.
Unmatched
An index entry that matches no original element, which makes the whole ats-hash-index-v3 invalid (EN 319 122-1 §5.5.2).

Enums§

IndexList
Which list of the index an entry belongs to.

Functions§

check_index
Matches every entry of index against the original elements it may name.
imprint_input
The message-imprint input of an archive-time-stamp-v3 (EN 319 122-1 §5.5.3), as original ranges in their required order: the content type encoding, content_hash, the signer’s version through signature encodings, and the ATSHashIndexV3 encoding.
same_algorithm
Whether the index algorithm is the time-stamp’s imprint algorithm, as §5.5.2 requires. Both are compared as resolved standard digests; an algorithm either side does not name as one is answered as such.
token_reader
A reader over the one time-stamp token of an archive-time-stamp-v3 attribute, for Token::read_from.

Type Aliases§

CoverageResult
Result of matching an index, or the provider’s answer that it cannot hash with the index algorithm.