Post quantum cryptography (PQC) in PDF signatures

[filip_3012]

Hello,

I would like to ask if there is any support, initiative, or research for signatures using post-quantum cryptography.

There is the PAdES specification, based on ISO 32000-1, which is supported in Acrobat, but it's quite old.

Does Acrobat support some format of PDF signatures using PQC? If not, are there any plans or a roadmap?

Thank you.

[Meenakshi Negi · Accepted solution]

Hi filip_3012,

Thank you for reaching out.

Currently, Acrobat does not support it. We do not have any information at this moment on whether there is any plan or roadmap for this. Once we have information, we will update you.

You may refer to the following help document for more information on signature in Acrobat:  https://adobe.ly/3WipT0o. 

Thanks,

Meenakshi

[MikelKlink]

I would like to ask if there is any support, initiative, or research for signatures using post-quantum cryptography.

The PDF Association currently is looking into PQC signature algorithm use in PDFs.

There is the PAdES specification, based on ISO 32000-1, which is supported in Acrobat, but it's quite old.

Well, the current version of the ETSI PAdES specification (ETSI EN 319 142-1 V1.2.1) is not that old: 2024-01... 😉

Nonetheless, PAdES itself is specified independently from the signature algorithms to use.

There is a recommendation to use the ETSI TS 119 312 algorithms and parameters but not a requirement. Thus, PAdES can be used in combination with PQC algorithms without issues.

By the way, there is an ETSI work item for updating ETSI TS 119 312 to include PQC algorithms...

[filip_3012]

Thanks, i know about ETSI TS 119 312 but didn't know about upcoming update.

[MikelKlink]

Thanks, i know about ETSI TS 119 312 but didn't know about upcoming update.

When you search for "119312" on the ETSI site - https://www.etsi.org/standards#search=119312 - you see that there are two updates in preparation for ETSI TS 119 312. One of them - https://portal.etsi.org/webapp/workprogram/Report_WorkItem.asp?WKI_ID=74949 - is about the "Transition from SOGIS to ECCG Agreed Cryptographic Mechanisms (incl. QSC algorithms)".

[filip_3012]

Thank you very much for pointing me in the right direction!