View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0008248Part 83: UAFX Offline Engineering [sg.OfflineEngineering]Specpublic2022-08-25 14:402022-10-14 13:20
ReporterTodd Snide Assigned ToTodd Snide  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Product Version1.00.00 RC3 
Target Version1.00.00 RC3Fixed in Version1.00.00 RC3 
Summary0008248: Part 83, section 7.7.1 the timestamp in SignatureProperty of a digital signature cannot be trusted (from D. Ziegler)
Description

In the sentence:
According to ISO/IEC 29500-2:2021, each digital signature shall contain in the SignatureProperty element a timestamp indicating the time when the digital signature was created.

It needs to be noted that this timestamp cannot really be trusted, since the signer may set it to an arbitrary value.

TagsNo tags attached.

Activities

Todd Snide

2022-08-26 16:03

developer   ~0017412

The requested note was written in section 7.7.1.
Note 1 to entry: Since the timestamp can be set to arbitrary values (within the validity period of the signing certificate) by the signer, it cannot be trusted for security purposes.

Emanuel Kolb

2022-10-14 13:20

manager   ~0018045

agreed in the team to close this

Issue History

Date Modified Username Field Change
2022-08-25 14:40 Todd Snide New Issue
2022-08-25 14:40 Todd Snide Status new => assigned
2022-08-25 14:40 Todd Snide Assigned To => Todd Snide
2022-08-26 16:03 Todd Snide Status assigned => resolved
2022-08-26 16:03 Todd Snide Resolution open => fixed
2022-08-26 16:03 Todd Snide Fixed in Version => 1.00.00 RC3
2022-08-26 16:03 Todd Snide Note Added: 0017412
2022-10-14 13:20 Emanuel Kolb Status resolved => closed
2022-10-14 13:20 Emanuel Kolb Note Added: 0018045