Reference to PKI Standards

The following is a list of references to standards documents:

Item	Description
Certification Service	CMC: https://www.ietf.org/rfc/rfc2797.txt EST: https://datatracker.ietf.org/doc/rfc7030 CA/B Forum TLS Server + CA baseline requirement: CA-Browser-Forum TLS BR 2.0.5 EV TLS Server: EV TLS Server Certificate Guidelines 2.0.1 Code Signing and EV Code Signing: Baseline Requirements for Code-Signing Certificates, v.3.7 S/MIME Certificate: S/MIME Baseline Requirements v. 1.0.3 Web Trust Guidelines CA Guidelines for all Certificates v2.2.2 TLS Server Certificate v2.8 EV TLS Certificate v1.8 Non-EV and EV Code Signing Certificate v3.2
Signing/Verification Service	PDF PDF Public Key Digital Signature and Encryption Specification v3.2 http://www.adobe.com/devnet/pdf/pdf_reference.html PKCS#7 Public Key Crypto Standards #7: http://www.faqs.org/rfcs/rfc2315.html PKCS#11 Public Key Crypto Standards #11: ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf PAdES PAdES Baseline Signatures (ETSI EN 319 142-1) https://www.etsi.org/deliver/etsi_en/319100_319199/31914201/01.01.00_30/en_31914201v010100v.pdf Additional PAdES Signatures Profiles (EN 319 142-2) https://www.etsi.org/deliver/etsi_en/319100_319199/31914202/01.01.01_60/en_31914202v010101p.pdf CAdES CMS Advanced Electronic Signatures: http://www.ietf.org/rfc/rfc5126.txt CAdES Baseline Signatures (ETSI EN 319 122-1) https://www.etsi.org/deliver/etsi_en/319100_319199/31912201/01.00.00_20/en_31912201v010000a.pdf CAdES Extended Signatures (ETSI EN 319 122-2) https://www.etsi.org/deliver/etsi_en/319100_319199/31912202/01.01.01_60/en_31912202v010101p.pdf XAdES XML Advanced Electronic Signatures: http://www.w3.org/TR/XAdES/ XAdES Baseline Signatures (EN 319 132-1) https://www.etsi.org/deliver/etsi_en/319100_319199/31913201/01.00.00_20/en_31913201v010000a.pdf XAdES Extended Signatures (EN 319 132-2) https://www.etsi.org/deliver/etsi_en/319100_319199/31913202/01.01.01_60/en_31913202v010101p.pdf CMS Cryptographic Message Syntax: http://tools.ietf.org/html/rfc5652.txt S/MIME Secure MIME Specification (for signing emails): http://www.ietf.org/rfc/rfc3851.txt XML DigSig XML Digital Signature Specification: http://www.ietf.org/rfc/rfc3275.txt
RAS Service	CSC v1.0.4.0: https://form.jotform.com/201604171635043 ETSI EN 419 241-1: https://www.etsi.org/deliver/etsi_ts/119400_119499/11943101/01.01.01_60/ts_11943101v010101p.pdf ETSI EN 419 241-2: https://www.etsi.org/deliver/etsi_ts/119400_119499/11943101/01.02.01_60/ts_11943101v010201p.pdf
SAM Service	ETSI EN 419 241-1: https://www.etsi.org/deliver/etsi_ts/119400_119499/11943101/01.01.01_60/ts_11943101v010101p.pdf ETSI EN 419 241-2: https://www.etsi.org/deliver/etsi_ts/119400_119499/11943101/01.02.01_60/ts_11943101v010201p.pdf
TSA Service	ETSI EN 319 421: https://www.etsi.org/deliver/etsi_en/319400_319499/319421/01.01.01_60/en_319421v010101p.pdf ETSI EN 319 422: https://www.etsi.org/deliver/etsi_en/319400_319499/319422/01.01.01_60/en_319422v010101p.pdf Time Stamp Protocol RFC 3161: http://www.ietf.org/rfc/rfc3161.txt Time Stamp Protocol RFC 5816: http://www.ietf.org/rfc/rfc5816.txt ISO/IEC 18014/1 and ISO/IEC 18014/2
OCSP Service	IETF RFC 6960: https://tools.ietf.org/html/rfc6960.txt IETF RFC 5019: https://tools.ietf.org/html/rfc5019.txt
SCVP Service	Server-side Certificate Validation Protocol: http://www.ietf.org/rfc/rfc5055.txt Using SCVP to convey Long-Term Evidence Records (also see LTANS above): http://www.ietf.org/rfc/rfc5276.txt
XKMS Service	XML Key Management Specification: http://www.w3.org/TR/xkms/ IETF RFC 5280: https://tools.ietf.org/html/rfc5280.txt
LTANS Service	Long Term Archive Service Requirements: http://datatracker.ietf.org/doc/rfc4810/ Evidence Record Syntax: http://datatracker.ietf.org/doc/rfc4998/ Extensible Markup Language Evidence Record Syntax (XMLERS): http://datatracker.ietf.org/doc/rfc6283

ADSS Server E-Passport solution is fully compliant with following standards:

Item	Description
ICAO 9303	ICAO 9303 7th Edition part 12 for Basic Access Control (BAC)
BSI TR-03139	BSI TR-03139 v2.2 for Extended Access Control (EAC)
BSI TR-03129	Protocols for the Management of Certificates and CRLs
BSI TR-03110	Advanced Security Mechanisms for Machine Readable Travel Documents
CSN 36 9791	Country Verifying Certification Authority Key Management Protocol for SPOC