Adobe Acrobat Reader DC PKCS#11 ECC - unsupported algorithm error

New Here ,
Mar 18, 2021 Mar 18, 2021

Copy link to clipboard

Copied

Hello, we tried to generate a digital signature with PKCS#11:

  • Adobe Acrobat Reader DC version 2021.001.20145
  • Default signing format: PKCS#7 - Detached
  • PKCS#11 key stored on smart card (QSCD):
    CKA_KEY_TYPE: CKK_EC
    CKA_EC_PARAMS: { 1 2 840 10045 3 1 7 }
  • ECDSA elliptic curve P256 with digest algorithm SHA256
  • Windows 10, macOS Catalina

We successfully loaded the PKCS#11 module. We started the signature process, added the PIN and after we tried to save the document we received the following error message:
"Error encountered while signing: unsupported algorithm."

The last function is called by Acrobat is the C_GetAttributeValue with CKA_KEY_TYPE: CKK_EC. There is further communication between Acrobat and PKCS#11 module.
According to the Acrobat DC Digital Signatures guide, the above-mentioned algorithm is supported:
https://www.adobe.com/devnet-docs/acrobatetk/tools/DigSigDC/standards.html
On the other hand, with Minidriver, we can generate a digital signature with the same key/certificate.

Is there any information about PKCS#11 supported algorithms?

Thanks

 

TOPICS
Mac , Security digital signatures and esignatures , Windows

Views

1.1K

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Jun 01, 2021 Jun 01, 2021

Copy link to clipboard

Copied

Hello,

Is there any update on this problem please ?

Is this really supposed to be supported ?

 

Thanks all,

AD

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Beginner ,
Jan 05, 2022 Jan 05, 2022

Copy link to clipboard

Copied

Did you solved this problem. We have now the same problem. I have a new eID. But the certificates were not longer recognised. So I re-Installed Adobe Acrobat Reader DC. The certificate for signature is now accepted and tested (5 green check marks). But at the end of the process to sign a .pdf document the error appears: (dutch:) “Fout aangetroffen tijdens ondertekenen: Niet-ondersteund algoritme” (free translated:)”Error encountered while signing: Unsupported algorithm”. What can I do? Please answer.

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Beginner ,
Feb 01, 2022 Feb 01, 2022

Copy link to clipboard

Copied

LATEST

The problem is solved. Solution : configure Acrobat Reader without pkcs#11 module.
If this module has already been linked, the already linked module must therefore be uncoupled again.
After unlinking, restart Acrobat Reader and try signing again.
BELGIUM uses software called eID middleware that communicates with the card for Windows. In the past Acrobat Reader could not use this middleware and Acrobat Reader needed the pkcs11 module to do the communication with the card. Recently, ADOBE has made the necessary changes so that READER can work with the middleware.
The pkcs11 module has now basically become optional within Acrobat Reader.

Likes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines