Test vectors for digital signatures

Hi, I am familiar now with signatures provided by java.security.Signature.
What I would like to have now is to proove my examples against some publicly available test vectors. I found some from NIST at http://csrc.nist.gov/cryptval/dss/RSAExample.zip. However, I don't know how to obtain these results from my examples.
Can anyone help me?
Michael

Read http://csrc.nist.gov/cryptval/dss/RSAVS.pdf
Thank you, I read that already but that didn't make things much clearer to me.
What I need IMO for a given algorithm is a keypair in encoded form, a clear-string and a signature string. Can you tell me where these are found in the document above?
I made a similar verification with symmetric encryption (Blowfish and AES). There the test vectors were understandable for me.
Michael

Similar Messages

  • Use of active directory userid/password authentication instead of SAP R/3 User/Password for digital signature?

    Dear all,
    I am looking to setup the use of active directory userid/password authentication instead of SAP R/3 User/Password for digital signature. We SSO to the backened ABAP AS via an SAP NW Portal to which SPNEgo kerberos authentication is setup. Today we specify R3 user id/password to digitally approvae a lot release. The idea is to have users maintain one AD password and don't have to remember the R/3 password anymore and also our Security team to avoid password maintenance.
    I know there are 3 options for digital signature and
    System signature with authorization by user ID and password (We use this currently)
    Digital User signature with verification - (We would like to use this with AD userid/password, so the system still ask the users their AD userid/password for the authentication when they try to "sign" a document.)
    User signature without verification
    Do you think there is a way to configure the system in order to ask and check the active directory userid/password instead of SAP R/3 password? Where can I found documentation about it ?
    I have several different versions of AS ABAP starting from NW 7.02 to NW 7.31.
    My active directory is based on Windows 2008.
    Thanks in advance!!
    Dhee

    Actually enabling Kerberos for SSO purposes and enabling Kerberos for digital signatures are two different topics although the latter is because of the former. I'm interested in the topic as well and I'm currently looking at different options. SAP provides a BAdI for the digital signature API which can be used for external authentication but they do not provide the solution to invoke Kerberos authentication based on username and password. SAP provides a semi solution with NWSSO 2.0 SP2 which works only on Windows with classic dynpros meaning SAP GUI for Windows is assumed. The solution is based on an ActiveX component which does the actual Kerberos authentication using the Secure Login Client which is part of the NWSSO suite. Extending that implementation to non-Windows and non-GUI applications would require some sort of web enabled service that could be used to authenticate the user with username and password. In case authentication is successful, a Kerberos token would be returned to SAP which would then be validated. All the required pieces are there since SAP has Kerberos support now in both stacks of the NetWeaver Application Server, some bits are still missing though which leaves customers looking at 3rd party or custom solutions.

  • Programmatically Accessing Self Sign in Plug in for Digital Signature

    Hello There,
    We are looking forward to use “Adode Acrobat 9 Pro – Self Sign in Plug in” for one of the application to digitally sign PDF document i.e. appending signature to existing PDF document. We have gone through Adobe site (http://learn.adobe.com/wiki/download/attachments/52658564/samplesignatures.pdf?version=1 ; http://www.adobe.com/ap/epaper/tips/acrsignatures/ ) and explored “Tips and Techniques” along with screenshots.
    We would like your help on following queries:
    ·         Can we programmatically from C#.NET access Adobe Object and create certificate for digital signature? If Yes, can you please provide pointers, references and sample code snippets? [We understand that we do not need to purchase SDK as Professional would be sufficient for digital PDF signature]
    ·         Does Adobe Pro installer provide DLL which can be leveraged in Code base i.e. C#.NET?
    ·         How does certificate management work for digital signing? Can third party like verisign, local computer / certificate from organization server work for digital PDF signature?
    ·         Please provide Technical Reference manual to use Adobe from C#.NET
    ·         Can you please throw some light and pointers on Licensing and Cost?
    We are running on a deadline hence your quick help and response will be highly appreciated.
    Thanks & Regards

    best check on the sdk forum:
    http://forums.adobe.com/community/acrobat/acrobat_sdk
    sdk docs can be found here:
    http://www.adobe.com/devnet/acrobat/?view=documentation

  • Is SharePoint Enterprise Needed For Digital Signatures?

    Hey SharePoint Fam,
    Had a request come in for Digital Signature use and was wondering is this even possible without Enterprise version?  We are on Standard 2010 version......
    Thanks n advance

    Waqas is right, you can use digital signatures with SharePoint Standard.
    More information on the
    CoSign Connector for SharePoint.
    CoSign offers free trials for integrating digital signatures with SharePoint:
    1. A private SharePoint site for your personal use, with CoSign installed, on a SharePoint server run by CoSign. 
    2. You can then request an on-premises trial copy of the CoSign Connector for SharePoint to try it on your own server.
    In addition to being a standard, open solution, digital signatures from CoSign enable your documents never have to leave your network during the signing process.
    Request a free trial.
    Disclosure: I work for CoSign

  • Save method for digital signatures

    Hi - I have several thousand forms all set up for digital signatures, which I use for locking down the form fields (render read-only). This works fine. The problem I have is that when a user digitally signs the form, they automatically get asked to Save As - with a default location on the local machine. Can this be changed to allow the user to simply save and overwrite the form in its original location. Of course there is a danger with doing this, but users with document/case management systems do not necessaritly know where to save the document, so basically they want to open up the form from their CMS/DMS, complete it, digitally sign it and simply save (automatically back in the location they launched it from.
    Does anyone know where I can even look - I have trawled the registry, the digital signature settings, etc, but no luck.

    Hi - these are all reader extended through Livecycle ES Reader extensions and are signed by users in Reader. What I am asking is if anyone has an idea where this behaviour is declared, so that I can change it.

  • Java SSF for Digital Signatures and Document Encryption

    Hello,
    I have read in "SAP Help - Java Development Manual" that there is a Java SSF library for Digital Signatures and Document Encryption API.
    http://help.sap.com/saphelp_nw04s/helpdata/en/4f/65c3b32107964996a56e4165077e24/frameset.htm
    I am trying to develop an example application in NWDS using Interfaces/classes (ISsfData, SsfDataXml...), but NWDS does not find this classes in any library.
    I have searched for Javadocs in NWDS plugins directory and this classes and interfaces should be in JAR com.sap.security.api.jar, but they aren't there.
    Our WAS version is: NW04s WAS 7.0 SP11 and he have downloaded Java Crypto Library (IAIK) and also SAP XML Toolkit.
    Does anyone know how to find or obtain this library?
    Thanks in advance,
    Jorge Linares

    Hello Francesco,
    I want to  generate a digital signature (PKCS#7,XML) using SAP SSF API as explained in
    http://help.sap.com/saphelp_nw04/helpdata/en/4f/65c3b32107964996a56e4165077e24/content.htm and in Amol Joshi's reply in
    Digital Signatures and Document Encryption api
    so my question  is From which PI/XI version and its SPS this SAP SSF LIBRARY is supported ?
    Kind Regards,
    Kubra fatima.

  • Any BAdi for Digital Signature?

    ECC 6.0
    Does anyone know of a BAdI, Enhancement Spot or exit for digital signature where I can detect the object that is being signed (in this situation Engg Change Management) and perform some follow on process (specifically call a Workflow API to create an event for Workflow)?
    Cheers,
    Ramki Maley.

    Hi,
    Thanks for your request. We have added it to our feature backlog and shall try to incorporate it in one of our future releases.
    Thanks,
    Shefali

  • Does the iOS app allow for digital signatures ?

    does the iOS app allow for digital signatures ?

    Hi,
    Currently, Adobe Reader mobile products (for iOS, Android, Windows Phone) do not support digital signatures.  But you can add handwritten signatures (as annotations) to PDF documents.
    For digital signatures for legally binding documents and contracts, I'd recommend the desktop version of Adobe Reader or Acrobat Pro/Standard.  Alternatively, you can use Adobe EchoSign for e-signatures.
    About Certificate signatures | Digital signatures
    Electronic Signature Software, Digital Signatures | Adobe EchoSign

  • Automatically renewing certificates for digital signatures

    Is it possible to setup some form of system that automatically renews the user certificate for digital signatures? If so, where can i find information on this?

    Hi - these are all reader extended through Livecycle ES Reader extensions and are signed by users in Reader. What I am asking is if anyone has an idea where this behaviour is declared, so that I can change it.

  • How to extract certificates from IE for digital signature

    hi
    how to extract certificates from the cert store provided by Internet Explorer 6.0 and use it to read & verify the digital signatures present in the pc.this is needed in my web based application n i have no idea!!!
    pls help me out
    i have studied a lot about all JCA n JCE but the extraction part still baffles me!!!
    my application will be java based so i can make an applet/ servlet/ jsp
    drop your ideas as soon as u get time as i am stuck in the initial phase itself
    priya_16

    hi
    i've the same problem. i've found this solution, but you need download a JCE Provider that allow you to read the explorer certificate store.
    You can try this one: https://download.assembla.se/jceprovider/
    and the code:
    import se.assembla.*;
    public class Listcerts {  
         public static void list() throws Exception{
              java.security.Security.insertProviderAt(new se.assembla.jce.provider.ms.MSProvider(), 2);
              KeyStore ks = KeyStore.getInstance("MSKS","assembla");
              ks.load(null,null);
              X509Certificate cert=null;
              String alias=null;
              int count=0;
              for (java.util.Enumeration e=ks.aliases();e.hasMoreElements();){
                        alias=(String)e.nextElement();
                        cert=(X509Certificate)ks.getCertificate(alias);
                        System.out.println("\n Certificado alias"+alias+":");
                        System.out.println(cert);
                   count++;
              System.out.println ("NUM CERTS="+count);
    now, i need the same solution for Firefox browser XP
    good luck
    Message was edited by:
    meteko

  • How do I resolve: Field Selection dialog [Pick... button] in "Mark as read-only" section of Signed tab for Digital Signature field is not working

    I am using Acrobat Pro X on Windows 7 Enterprise x64 to create a form. When I have a simple form with a few fields, I am able to use the "Pick..." button to select the fields I want to select, but in a more complex form (20 fields with 3 Signature fields) The Field Selection dialog does not work. I can make the selections, but they are not saved. Removing fields does not resolve issue. IF I start with a blank form and add a few fields, the dialog will work, but after adding more, it quits working. Reader XI is also installed.

    And that is why many responders use only the custom JavaScript calculation option.
    The UI for the select fields and simplified field nations are only a way to pass field names to a JavaScript function that performs the actual calculation. Sometimes these functions call other functions and pass the parameters can lead to errors in the attempted code.
    I would start to learn code JavaScript for Acrobat.
    The pick field dialog is for performing calculations involving sums, products, averages, minimum, and maximum. I am not sure how that would work with a digital signature. Once a signature is applied the form fields could be locked.

  • Fire fox is not reading my XML file for digital signature

    I have to upload the xml file in www.incometaxindiaefiling.gov.in by digitally signing the xml file. When I click on the tab for digital sign, the message come " cannot read the xml file"

    Not the sort of thing it is easy to help with as by definition it will not be a public site but one for Indian Taxpayers, and can be expected to be secure.
    Have you tried using Internet Explorer.
    You could try attaching screen shots of the problem pages and any error messages, but please be careful and edit out any confidential or sensitive information before attaching such an image.
    Please remember you are posting on a public and websearch indexed website, this is not a private support ticket.
    *link is https://support.mozilla.org/en-US/questions/968557
    Are you seeing a shield icon in your location bar as explained in this article
    * How does content that isn't secure affect my safety?
    That is rather a longshot as it is a change in Firefox so could affect you this year, but would not have affected you last year.
    * see [[How does content that isn't secure affect my safety?]]
    I note the public portion of the site
    * https://incometaxindiaefiling.gov.in/
    * talks about 'e-Filing' and 'Option 1: Use Digital Signature Certificate (DSC)' and then gives two other alternatives
    Other possibilities
    *[[Troubleshoot the "Secure Connection Failed" error message]]

  • Pro or Standard for digital signatures

    Do I need Adobe Acrobat Pro or can I use Adobe Acrobat Standard X to have digital signatures enabled for Adobe Reader file users.  So far, Standard X isn't working for the Reader files.

    You need Pro.

  • Can ILM_TOOLKIT  be  used standalone  for Digital Signatures on result sets

    Hello
    Looking for means to digitally sign rolled out PL/SQL software I found the Digital Signature functions of ILM Assistant.
    We probably won’t be using the basic functions of ILM as there’s already an application data lifecycle process in place, but the “Immutability” functions look very interesting.
    A digital signature, for our purpose, could perhaps be created with a query against DBA_SOURCE.
    So far I found the procedures
    ILM_TOOLKIT.create_sql_result_set
    ILM_TOOLKIT:delete_sql_result_set
    ILM_TOOLKIT.load_sql_result_set
    which might do what we want. But I haven’t found any published documentation yet
    Does anyone know if the ILM_TOOLKIT can be installed and used standalone (i.e. without apex and browser GUI) in order to be called directly and if there’s any documentation on it.
    Thank you very much
    Klaus

    Hi,
    You can certainly install the toolkit without the gui, but you would have to modify the installation scripts to keep it from installing the APEX application after the toolkit has been installed.
    There is no published documentation; however, I could give you some insight into what you would need to do. Let me know if this still interests you.
    Thanks,
    Greg

  • How Adobe reader will access SAP PKI for digital signatures

    Hello,
    I am using a ABAP report to upload signed PDF document and validating the signature. However signature which I am using is client side Signature and not the server side. I still hope that I would be able to get these signatures from document.
    When I call execute method of CL_FP_PDF_OBJECT it gives this error
    Exception from the class CX_FP_RUNTIME_SYSTEM was caught, and that is due to No SSL installed yet.
    But I have doubt that, does ADS has trouble seperating the client side (local signatures from document), I hope not!
    One more question, If my PKI is setup Using SAPSECLIB or SAPCRPLIB then how will my local adobe reader access to this server to get public keys..
    I am facing hard time visualizing, where we will specify in my Adobe acrobat that go to So and so SAP server for keys!! Or Private keys are always with signers on his machine?
    Thanks,
    Nitesh Shelar

    Hello Philipp,
    Thanks for your reply.
    So as we can add any directory server in Adobe reader and trusted identities, we can do the same with Adobe document services? So its Adobe document services, which actually validates the signature and not the web application server.
    I have one more query. I have five level approval on my form where five approvers will use Windows Certificate Store to sign the document. But for this I assume that document needs to be passed from one approver to next approver in offline mode. Because once PDF document goes back to server only data of PDF will be retained after validating the signatures. So if we have multilevel approver scenario as I have in my case, we will always have to use offline mode? I am using the WebDynpro right now, can Guided procedure or ISR can help in this case.(Multiple approvers using digital signatures to sign the document)?
    Thanks,
    Nitesh Shelar.

Maybe you are looking for