CAdES

ETSI's CMS/binary advanced signature format, for non-XML, non-PDF files.

Definition

CAdES extends the Cryptographic Message Syntax (CMS, RFC 5652) with signed and unsigned attributes that satisfy eIDAS: signer certificate, timestamp token, revocation information. It is the advanced format chosen for binary, non-XML data and serves as the technical foundation for PAdES. It offers the same baseline levels B-B, B-T, B-LT, B-LTA as XAdES.

Origin

Standardised by ETSI EN 319 122-1 (Electronic Signatures and Infrastructures; CAdES digital signatures), published by the ETSI ESI committee, on top of the IETF CMS (RFC 5652). Formerly TS 101 733.

Example in context

A detached CAdES signature (.p7s) accompanies a binary file; the CMS container carries the SignerInfo, the signed attribute signing-certificate-v2 and an unsigned signature-time-stamp attribute (RFC 3161) to reach the B-T level.

Related terms

• XAdES, CAdES, PAdES — the three ETSI AdES formats.
• AdES baseline levels — B-B, B-T, B-LT, B-LTA.