NBU - Certificated products for QES Users

NOTICE

To create the qualified electronic signature the user must own:

1. an application for the qualified electronic signature creation (SCVA or SCA) which may be obtained from the producer of applications (Table B),
2. a secure SSCD device certified by the National Security Authority (Table A) in which the private key is stored and which may be obtained from some ACA or its Registration Authority (ACA List).

The National Security Authority before establishing the QES recommends:

1. to take into consideration what formats of electronic documents in administrative relations the user wants to sign by the qualified electronic signature or what formats of electronic documents are used by the information system of public administration (e-Government application) the services of which the user wants to utilise and thereafter choose a specific SCVA or SCA application,
2. to verify with the producer of the certified application for the qualified electronic signature creation and verification which SSCD device from the list of certified SSCD products is supported by a particular application.

Shorts:

      SSCD - Secure Signature Creation Device
      SCVA - Signature Creation & Verification Application
      SCA - Signature Creation Application
      SVA - Signature Verification Application

Certificated Interface:
       A - APDU communication of AdES Application directly with SSCD chip pursuant to EN 14890-1, EN 14890-2
       C - PKCS#11 DLL pursuant to Cryptoki
       M - Microsoft Cryptography API
       X - Interface is not certificated

Table A: SSCD certificated products

Table B: SCVA, SCA and SVA certificated products

^*1 The 602XML Form
^*2 The application also enables to work with the document in DOC fomat. It converts this format and stores it in RTF format which it signs.
^*3 The application also enables to work with graphic formats like GIF, JPG or BMP. It converts these formats and stores them in PNG format which it signs.
^*4 XML documents, PDF documents, etc., or a random combination of supported data formats which form together the so called multipart document.
^*2 The application also enables to work with the document in DOC and DOCX fomat. It converts this formats and stores it in RTF format which it signs.

Certificated products charakteristic

A1 - Smart Card STARCOS SPK 3.0
     The NSA finished a certification process of a product on 9 December 2008. The process was finished on the basis of submitting the application of the company První certifikační autorita, a.s., with the address Podvinný mlýn 2178/6, 190 00 Praha 9, Czech Republic for the product certification for the Electronic signature Smart Card STARCOS SPK 3.0 from 26 November 2008 in accordance with the Article 10 section 2 letter j) of the Act no. 215/2002 Coll. on Electronic Signature.
      The NSA finished a certification process of a product on 8 August 2011. The process was finished on the basis of submitting the application of the company První certifikační autorita, a.s., with the address Podvinný mlýn 2178/6, 190 00 Praha 9, Czech Republic for the product certification for the Electronic signature Smart Card STARCOS SPK 3.0 from 20 July 2011in accordance with the 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
     Smart Card STARCOS SPK 2.3 can be used for secure generating and saving of private and public keys (key pairs), for the Qualified Electronic Signature creation and verification, for saving of qualified certificates,and their usage in applications supporting the electronic signing. The product can be used only with signature schemes which are admissible by legal rules of the Slovak republic especially by Regulation no. 135/2009 Coll. on Qualified Electronic Signature creation and verification and Time Stamp creation and verification and are valid in the time of Qualified Electronic Signature creation with the use of SCVA product (Signature Creation & Verification Application) or SCA product (Signature Creation Application) with the valid certificate issued by the National Security Authority.

A2 - Chip Card CryptoPlus XG ZEP/EP profiles, version CryptoPlus XG v1.14
      The NSA finished a certification process of a product on 10 August 2009. The process was finished on the basis of submitting the application of company Disig, a.s., Záhradnícka 151, 824 08 Bratislava for product certification for the Electronic signature „CryptoPlus XG ZEP/EP profiles, version CryptoPlus XG v1.14“ on 16 June 2009 in accordance with Article 24 (7) of the Act no. 215/2002 Coll. on Electronic Signature.
     The products can be used for secure generating and saving of private and public keys (key pairs), for the Qualified Electronic Signature creation and verification, its use in applications supporting the electronic signing, for saving of qualified certificates (QES area of chip card) and certificates (ES area of chip card), also for its use in applications supporting the electronic signing. The product can be used only with signature schemes which are admissible by legal rules of the Slovak republic especially by Regulation no. 135/2009 Coll. on Qualified Electronic Signature creation and verification and Time Stamp creation and verification and are valid in the time of Qualified Electronic Signature creation with the use of SCVA product (Signature Creation & Verification Application) or SCA product (Signature Creation Application) with the valid certificate issued by the National Security Authority.
     SHA 1 hash of file
crzep11.dll       99965D1410748D8546F64719052C361215DE091C
crzep11p.dll     89EE7A4EDF6C55D98A82BD6E35065B6E6DBFE293
dizep.dll            61C932343B418B49CDD2CE51B3966702D187FED1

A3 - Chip Card Siemens CardOS Smartcard 32KB/64KB, CardOS V4.3B - DSDA version
      The NSA finished a certification process of a product on 24 August 2010. The process was finished on the basis of submitting the application of company Disig, a.s., Záhradnícka 151, 824 08 Bratislava for product certification for the Electronic signature „CardOS Smartcard 32KB/64KB, CardOS V4.3B - DSDA“ on 26 May 2010 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
      The products can be used for secure generating and saving of private and public keys (key pairs), for the Qualified Electronic Signature creation and verification, its use in applications supporting the electronic signing, for saving of qualified certificates and certificates, also for its use in applications supporting the electronic signing, for secure saving of other text or data files. The product can be used only with signature schemes which are admissible by legal rules of the Slovak republic especially by Regulation no. 135/2009 Coll. on Qualified Electronic Signature creation and verification and Time Stamp creation and verification and are valid in the time of Qualified Electronic Signature creation with the use of SCVA product (Signature Creation & Verification Application) or SCA product (Signature Creation Application) with the valid certificate issued by the National Security Authority.

A4 - Chip Card Siemens version CardOS V4.4 - DSDA
      The NSA finished a certification process of a product on 16. December 2011. The process was finished on the basis of submitting the application of company Disig, a. s., Záhradnícka 151, 824 08 Bratislava for product certification for the Electronic signature „Chip Card Siemens version CardOS V4.4 - DSDA“ on 7.November 2011in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
      The products can be used for secure generating and saving of private and public keys (key pairs), for the Qualified Electronic Signature creation and verification, its use in applications supporting the electronic signing, for saving of qualified certificates and certificates, also for its use in applications supporting the electronic signing. The product can be used only with signature schemes which are admissible by legal rules of the Slovak Republic especially by Decree No. 135/2009 Coll. on Qualified Electronic Signature creation and verification and Time Stamp creation and verification and are valid in the time of Qualified Electronic Signature creation with the use of SCVA product (Signature Creation & Verification Application) or SCA product (Signature Creation Application) with the valid certificate issued by the National Security Authority.

B1 - QSign version 3.4
      The NSA finished a certification process of a product on 18 December 2009. The process was finished on the basis of submitting the application of the company Ardaco, a.s., Polianky 5, 841 01 Bratislava for the product certification for the electronic signature "Qsign version 3.4 “ on 13 November 2009 in accordance with Article 24 (7) of the Act no. 215/2002 Coll. on Electronic Signature.
      The product is determined for Qualified Electronic Signature creation and verification in approved formats CAdES-EPES (CMS signature without Time stamp), CAdES-EPES-T (CMS signature with Time stamp), CAdES-EPES-C-X (CMS signature with the complete information for validity verification), CAdES-EPES-A (CMS Archive signature) and Integrity signature.

B2 - QSign version 4.0
       The NSA finished a certification process of a product on 8 June 2009. The process was finished on the basis of submitting the application of the company Ardaco, a.s., Polianky 5, 841 01 Bratislava for the product certification for the electronic signature "Qsign version 4.0 “ on 14 April 2010 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
       The product is determined for the Qualified Electronic Signature creation and verification in approved formats such as CAdES-EPES (CMS signature without Time stamp), CAdES-EPES-T (CMS signature with Time stamp), CAdES-EPES-C-X (CMS signature with the complete information for validity verification), CAdES-EPES-A (CMS Archive signature) and the Integrity signature and in formats XAdES-EPES (XML signature without Time stamp), XAdES-EPES-T (XML signature with Time stamp), XAdES-EPES-C-X (XML signature with the complete information for validity verification) a XAdES-EPES-A (XML Archive signature).

B3 - D. Signer/ XAdES version 1.1.0.0 with D. Signer/XAdES-XML Plugin version 1.1.0.0, D. Signer/XAdES-PDF Plugin version 1.0.0.0 and D. Signer/XAdES-FO Plugin version 1.0.0.0
      The NSA finished a certification process of a products on 30 June 2010. The process was finished on the basis of submitting the application of company Ditec, a. s., Plynárenská 7/C, 821 09 Bratislava for products certification for the electronic signature „D. Signer/XAdES version 1.1.0.0, D. Signer/XAdES-XML Plugin version 1.1.0.0 and D.Signer/XAdES-PDF Plugin version 1.0.0.0“ on 11 November 2009 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
     The NSA finished a certification process of a products on 16 August 2010. The process was finished on the basis of submitting the application of company Ditec, a. s., Plynárenská 7/C, 821 09 Bratislava for products certification for the electronic signature „D. Signer/XAdES-FO Plugin version 1.0.0.0“ on 29 January 2010 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
      D. Signer/XAdES version 1.1.0.0 can be used only with plugins for particular data types being certified by the National Security Authority in compliance with instructions from the manufacturer. Plugins D. Signer/XAdES-XML Plugin version 1.1.0.0, D. Signer/XAdES-PDF Plugin version 1.0.0.0 and D. Signer/XAdES-FO Plugin version 1.0.0.0 may be used only with the application D.Signer/XAdES being certified by the National Security Authority. All restrictions and usage conditions which are defined in respective certificates issued by the National Security Authority must be met for the secure usage of the application and plugins.
The product is determined for the Qualified Electronic Signature creation in XAdES-EPES formats.
According to the declaration of the producer the product uses the services of SSCD device through Crypto Service Provider, therefore the direct dependency on particular SSCD devices does not exist. The existence of Crypto Service Provider for a given device is, naturally, the condition.

B4 - QSign version 3.4.1
       The NSA finished a certification process of a product on 8 December 2010. The process was finished on the basis of submitting the application of the company Ardaco, a.s., Polianky 5, 841 01 Bratislava for the product certification for the electronic signature "Qsign version 3.4.1 “ on 11 November 2010 in accordance with Article 24 (7) of the Act no. 215/2002 Coll. on Electronic Signature.
      The product is determined for Qualified Electronic Signature creation and verification in approved formats CAdES-EPES (CMS signature without Time stamp), CAdES-EPES-T (CMS signature with Time stamp), CAdES-EPES-C-X (CMS signature with the complete information for validity verification), CAdES-EPES-A (CMS Archive signature) and Integrity signature.

B5 - ICASignZEP version 1.0.0, ICARtfPluginZEP version 1.0.0, ICATxtPluginZEP version 1.0.0 and ICAOfficePluginZEP version 1.0.0
       The NSA finished a certification process of a product on 21 February 2011. The process was finished on the basis of submitting the application of the company První certifikační autorita, a.s., Podvinný mlýn 6, 190 00 Praha 9, Czech Republic for the product certification for the electronic signature „ICASignZEP version 1.0.0, ICARtfPluginZEP version 1.0.0, ICATxtPluginZEP version 1.0.0 and ICAOfficePluginZEP version 1.0.0“ on 1 December 2010 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
      The NSA finished a certification process of a product on 17. August 2011. The process was finished on the basis of submitting the application of the company První certifikační autorita, a.s., Podvinný mlýn 6, 190 00 Praha 9, Czech Republic for the product certification for the electronic signature „ICATxtPluginZEP version 1.0.0” on 20 July 2011 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature. The certificated product is intended for control of the content integrity and for ensuring the visualization of TXT format documents being signed and verified for applications for the qualified electronic signature creation (ICASignZEP) and verification (ICAVerifyZEP) in the format CAdES-EPES (CMS signature without the time stamp) and CAdES-EPES-T (CMS signature with the time stamp).
      The product is determined for the qualified electronic signature creation in CAdES-EPES (CMS Signature without Timestamp) and CAdES-EPES-T (CMS Signature with Timestamp) formats.
      ICASignZEP version 1.0.0 can be used only with plugins for particular data types being certificated by the National Security Authority in compliance with instructions from the manufacturer. Plugins ICARtfPluginZEP version 1.0.0, ICATxtPluginZEP version 1.0.0 and ICAOfficePluginZEP version 1.0.0 may be used only with the application ICASignZEP being certificated by the National Security Authority. All restrictions and usage conditions which are defined in respective certificates issued by the National Security Authority must be met for the secure usage of the application and plugins.
      According to the declaration of the manufacturer the application is possible to cooperate with all certificated SSCD devices for the qualified electronic signature creation which are supplied by the Crypto Service Provider modul enabling the access to their functions via Microsoft Crypto API. In particular, authorized SSCDs are determined via configurational file administrated by the manufacturer.

B6 - QSign version 4.1
       The NSA finished a certification process of a product on 23 May 2011. The process was finished on the basis of submitting the application of the company Ardaco, a.s., Polianky 5, 841 01 Bratislava for the product certification for the electronic signature "Qsign version 4.1 “ on 11 November 2010 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
       The product is determined for the Qualified Electronic Signature creation and verification in approved formats.

B7 - QSign eSigner version 1.0
       The NSA finished a certification process of a product on 23 May 2011. The process was finished on the basis of submitting the application of the company Ardaco, a.s., Polianky 5, 841 01 Bratislava for the product certification for the electronic signature "Qsign eSigner version 1.0 “ on 11 November 2010 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
       The product is determined for the Qualified Electronic Signature creation in approved formats.

B8 - D. Signer/ XAdES version 2.0.0.0 with D. Signer/XAdES-XML Plugin version 2.0.0.0, D. Signer/XAdES-PDF Plugin version 2.0.0.0 and D. Signer/XAdES-FO Plugin version 2.0.0.0
       The NSA finished a certification process of a products on 15 July 2011. The process was finished on the basis of submitting the application of company Ditec, a. s., Plynárenská 7/C, 821 09 Bratislava for products certification for the electronic signature „D. Signer/XAdES version 2.0.0.0, D. Signer/XAdES-XML Plugin version 2.0.0.0, D.Signer/XAdES-PDF Plugin version 2.0.0.0 and D.Signer/XAdES-FO Plugin version 2.0.0.0“ on 21 June 2011 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
       D. Signer/XAdES version 2.0.0.0 can be used only with plugins for particular data types being certified by the National Security Authority in compliance with instructions from the manufacturer. Plugins D. Signer/XAdES-XML Plugin version 2.0.0.0, D. Signer/XAdES-PDF Plugin version 2.0.0.0 and D. Signer/XAdES-FO Plugin version 2.0.0.0 may be used only with the application D.Signer/XAdES being certified by the National Security Authority. All restrictions and usage conditions which are defined in respective certificates issued by the National Security Authority must be met for the secure usage of the application and plugins.
      The product is determined for the Qualified Electronic Signature creation in XAdES-EPES formats.
      According to the declaration of the producer the product uses the services of SSCD device through Crypto Service Provider, therefore the direct dependency on particular SSCD devices does not exist. The existence of Crypto Service Provider for a given device is, naturally, the condition.

B9 - ICASignZEP version 2.0.0
       The NSA finished a certification process of a product on 17. August 2011. The process was finished on the basis of submitting the application of the company První certifikační autorita, a.s., Podvinný mlýn 6, 190 00 Praha 9, Czech Republic for the product certification for the electronic signature „ICASignZEP version 2.0.0“ on 20 July 2011 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
       The product is determined for the qualified electronic signature creation in CAdES-EPES (CMS Signature without Timestamp) and CAdES-EPES-T (CMS Signature with Timestamp) formats.
       ICASignZEP version 2.0.0 can be used only with plugins for particular data types being certificated by the National Security Authority in compliance with instructions from the manufacturer (ICARtfPluginZEP version 2.0.0, ICATxtPluginZEP version 1.0.0 and ICAOfficePluginZEP version 1.0.0). All restrictions and usage conditions which are defined in respective certificates issued by the National Security Authority must be met for the secure usage of the application and plugins.
       According to the declaration of the manufacturer the application is possible to cooperate with all certificated SSCD devices for the qualified electronic signature creation which are supplied by the Crypto Service Provider module enabling the access to their functions via Microsoft Crypto API. In particular, authorized SSCDs are determined via configurational file administrated by the manufacturer.

B10 - ICAVerifyZEP version 1.0.0
       The NSA finished a certification process of a product on 17. August 2011. The process was finished on the basis of submitting the application of the company První certifikační autorita, a.s., Podvinný mlýn 6, 190 00 Praha 9, Czech Republic for the product certification for the electronic signature „ICAVerifyZEP version 1.0.0“ on 20 July 2011 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
       The product is determined for the qualified electronic signature verification in CAdES-EPES (CMS Signature without Timestamp) and CAdES-EPES-T (CMS Signature with Timestamp) formats.
       ICAVerifyZEP version 1.0.0 can be used only with plugins for particular data types being certificated by the National Security Authority in compliance with instructions from the manufacturer (ICARtfPluginZEP version 2.0.0 and ICATxtPluginZEP version 1.0.0). All restrictions and usage conditions which are defined in respective certificates issued by the National Security Authority must be met for the secure usage of the application and plugins.
       According to the declaration of the manufacturer the application is possible to cooperate with all certificated SSCD devices for the qualified electronic signature creation which are supplied by the Crypto Service Provider module enabling the access to their functions via Microsoft Crypto API. In particular, authorized SSCDs are determined via configurational file administrated by the manufacturer.

B11 - ICARtfPluginZEP version 2.0.0 and ICATxtPluginZEP version 1.0.0
       The NSA finished a certification process of products on 17. August 2011. The process was finished on the basis of submitting the application of the company První certifikační autorita, a.s., Podvinný mlýn 6, 190 00 Praha 9, Czech Republic for the products certification for the electronic signature „ICARtfPluginZEP version 2.0.0 and ICATxtPluginZEP version 1.0.0 “on 20 July 2011 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
      The certificated products are intended for control of the content integrity and for ensuring the visualization of RTF or TXT format documents being signed and verified for applications for the qualified electronic signature creation (ICASignZEP) and verification (ICAVerifyZEP) in the format CAdES-EPES (CMS signature without the time stamp) and CAdES-EPES-T (CMS signature with the time stamp). All restrictions and usage conditions which are defined in respective certificates issued by the National Security Authority must be met for the secure usage of the application and plugins.

B12 - QSign version 4.2
      The NSA finished a certification process of a product on 24 November 2011. The process was finished on the basis of submitting the application of the company Ardaco, a.s., Polianky 5, 841 01 Bratislava for the product certification for the electronic signature "QSign version 4.2 “ on 23 August 2011 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
      The product is determined for the Qualified Electronic Signature creation and verification in approved formats.

B13 - ICASignZEP version 3.0.0
      The NSA finished a certification process of a product on 18. January 2012. The process was finished on the basis of submitting the application of the company První certifikační autorita, a.s., Podvinný mlýn 6, 190 00 Praha 9, Czech Republic for the product certification for the electronic signature „ICASignZEP version 3.0.0“ on 20 December 2011 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
      The product is determined for the qualified electronic signature creation in CAdES-EPES (CMS Signature without Timestamp) and CAdES-EPES-T (CMS Signature with Timestamp) formats.
      ICASignZEP version 3.0.0 can be used only with plugins for particular data types being certificated by the National Security Authority in compliance with instructions from the manufacturer (ICARtfPluginZEP version 2.0.0, ICATxtPluginZEP version 1.0.0 and ICAOfficePluginZEP version 1.0.0). All restrictions and usage conditions which are defined in respective certificates issued by the National Security Authority must be met for the secure usage of the application and plugins.
      According to the declaration of the manufacturer the application is possible to cooperate with all certificated SSCD devices for the qualified electronic signature creation which are supplied by the Crypto Service Provider module enabling the access to their functions via Microsoft Crypto API. In particular, authorized SSCDs are determined via configurational file administrated by the manufacturer.

B14 - ICAVerifyZEP version 2.0.0
      The NSA finished a certification process of a product on 18. January 2012. The process was finished on the basis of submitting the application of the company První certifikační autorita, a.s., Podvinný mlýn 6, 190 00 Praha 9, Czech Republic for the product certification for the electronic signature „ICAVerifyZEP version 2.0.0“ on 20 December 2011 in accordance with Article 24 (7) of the Act No. 215/2002 Coll. on Electronic Signature.
      The product is determined for the qualified electronic signature verification in CAdES-EPES (CMS Signature without Timestamp) and CAdES-EPES-T (CMS Signature with Timestamp) formats.
      ICAVerifyZEP version 1.0.0 can be used only with plugins for particular data types being certificated by the National Security Authority in compliance with instructions from the manufacturer (ICARtfPluginZEP version 2.0.0 and ICATxtPluginZEP version 1.0.0). All restrictions and usage conditions which are defined in respective certificates issued by the National Security Authority must be met for the secure usage of the application and plugins.
      According to the declaration of the manufacturer the application is possible to cooperate with all certificated SSCD devices for the qualified electronic signature creation which are supplied by the Crypto Service Provider module enabling the access to their functions via Microsoft Crypto API. In particular, authorized SSCDs are determined via configurational file administrated by the manufacturer.