PdfDigitalSignatureProfile Enumeration
The PAdES baseline profile applied when digitally signing a PDF document,
as defined by ETSI EN 319 142-1. Higher profiles embed progressively more
material into the document so the signature can be validated long after the
signing certificate expires
Namespace: EvoPdf.NextAssembly: EvoPdf.Next (in EvoPdf.Next.dll) Version: 14.86.0
public enum PdfDigitalSignatureProfile
| Auto | 0 |
The signature level is selected automatically from the other signature
settings, preserving the behavior of previous versions: when
TimestampServerUrl is configured the
produced signature is PAdES B-T, otherwise PAdES B-B
|
| PadesBaselineB | 1 |
PAdES Baseline-B: a CAdES signature with the signing certificate
attribute. The signing time is declared by the signer and there is
no independent proof of when the document was signed
|
| PadesBaselineT | 2 |
PAdES Baseline-T: Baseline-B extended with an RFC 3161 signature
timestamp obtained from the configured timestamp server, providing
independent proof of the signing time.
Requires TimestampServerUrl |
| PadesBaselineLT | 3 |
PAdES Baseline-LT (long-term): Baseline-T extended with a Document
Security Store embedding the certificate chains and their revocation
information (OCSP responses, or CRLs when no OCSP responder is available),
so the signature remains verifiable without any external service,
even years after the certificates expire.
Requires TimestampServerUrl.
The revocation information is downloaded during signing from the URLs
published in the certificates, so signing requires network access.
A revoked certificate refuses the signature
|
| PadesBaselineLTA | 4 |
PAdES Baseline-LTA (long-term with archive timestamp): Baseline-LT
extended with a document timestamp that seals the whole document
including the embedded validation data, enabling decades-long archival.
Requires TimestampServerUrl.
For very long retention periods the document timestamp should be
periodically renewed before its certificate expires
|