swedenconnect / svt-core

Core components for generation and validation of Signature Validation Tokens (SVT).

Signature Validation Token Core

Core components for generation and validation of Signature Validation Tokens (SVT) providing the following core features:

• Java classes representing the claims of SVT tokens.
• Abstract SVT isuer providing core functions for issuing SVT tokens.
• Abstract SVT validator provising core functions for validating signatures based on SVT tokens

Note: This library has been moved to the swedenconnect organization from idsec-solutions where it was named "sig-validation-svt". Artifact and package names have also been changed from idsec to swedenconnect. During the move, the artifact-id was changed from svt-base to svt-core.

---

Maven

From version 1.1.0 and onwards:

<dependency>
    <groupId>se.swedenconnect.sigval</groupId>
    <artifactId>svt-core</artifactId>
    <version>${svt-core.version}</version>
</dependency>

Older versions:

<dependency>
    <groupId>se.idsec.sigval</groupId>
    <artifactId>svt-base</artifactId>
    <version>${svt-base.version}</version>
</dependency>

API documentation

Java API documentation for se.swedenconnect.sigval:svt-core.

---

Copyright © The Swedish Agency for Digital Government (DIGG), 2019-2023. All Rights Reserved.

svt-core's Issues

Fixing chain_hash issue

The first version of the IETF draft discovered a design flaw in the chain_hash processing where the second hash is a hash of the chain in the order it appears in the signature. It turns out that PDF signature has a SET of certificate that may be returned from a parser in any order.

The logic is to be changed to include an array of cert hashes in the order from the signing certificate to the TA.