Cryptographic envelope - what is it and how does it work in electronic signature?
In the world of digital solutions, security is key. And one of the most important mechanisms that guarantees this security is the following. cryptographic envelope. While it sounds like a term from a spy movie, it's actually an everyday part of electronic signatures that protects Your data, identity and proof of signature of the document.
What is a cryptographic envelope?
The cryptographic envelope is digital package, which links the document, the electronic signature and all the information needed to verify it.
It is because of her:
- The document, once signed, cannot be changed,
- It is known who signed it and when,
- The signature can be effectively verified - even after several years.
It's like putting a traditional paper document in an envelope, sealing it and stamping it with your name and the date.
Does the envelope only apply to the CAdES signature?
How does the envelope look in different signature formats?
Format | Envelope type | Can it be called a cryptographic envelope? | Example |
Yes - always | Yes, the file .p7s or .asice is a classic envelope | contract.docx.p7s | |
XAdES | Yes - often | Yes, especially when a container is used .asice | invoice.xml.asice |
PAdES | Yes - but „embedded” | Yes, although the signature is embedded in the PDF, the PDF file becomes both a document and an envelope | offer.pdf |
As you can see, each formats creates its own version of the cryptographic envelope - sometimes as a separate file, sometimes as a container, and sometimes as an embedded signature.
Note: different technical approaches, same idea
- W PAdES (PDF) does not have a separate signature file - the signature and the document are embedded together. But technically, the entire PDF file becomes a envelope, because it contains the signature, certificate data and security features.
- W CAdES i XAdES, the envelope can be in a more „classic” form - as a separate file .p7s or container .asice, which includes both the document and the signature.
Why all the envelope?
Thanks to the envelope:
- document is protected from manipulation - Even by one letter,
- it can be verify any tool compliant with standards eIDAS,
- electronic workflow systems can automatically read the signature data,
- document meets formal requirements, e.g. when dealing with authorities or courts.
What does it look like in practice? Examples from Asseco
proCertum SmartSign - desktop signature center
When signing a document in proCertum SmartSign, you can choose your preferred format: PAdES, CAdES or XAdES. The application itself creates the appropriate cryptographic envelope:
- PAdES signature - the PDF file becomes both a document and an envelope,
- CAdES signature - you get the file .p7s (separately) or container .asice (with document and signature inside),
- signature XAdES - XML file or .asice containing the document and signature.
The application automatically embeds the certificate, timestamp (if you choose) and takes care of the correctness of the structure.
WebNotarius - online verification and envelope preview
WebNotarius is a web application from Asseco that allows:
- verify the signed document (XAdES, CAdES),
- look into the contents of the envelope .asice,
- check the certificate and its validity,
- download the signature data, including the timestamp.
It's an ideal tool when you need to confirm the authenticity of a signature, but don't want to install additional programs.
For whom does it matter?
In summary, kcrypto operta is not an add-on - it the foundation of a secure electronic signature. It is thanks to her that the signed document is:
- inviolable,
- verifiable,
- compliant with the standards of EU law.
Solutions from Asseco - proCertum SmartSign i WebNotarius - create and handle envelopes automatically. You just sign, and all the cryptography happens in the background.
Want to get started? Visit podpisano.pl and check out our qualified signature tools - mobile and desktop, for companies, offices and individuals.