SK ID Solutions Timestamping Demo

How timestamping works

Five steps. Press play, or click a step.

Your data is hashed locally and only the hash is sent to the SK Time-Stamping Unit. It adds trusted time, and the HSM signs with the TSU key. The token is returned. The Supporting PKI issued the TSU certificate in advance. YOUR SIDE (browser / app) SK TIME-STAMPING AUTHORITY TSA SERVICE SUPPORTING PKI Issues the TSU certificates in advance. Not involved in individual timestamp requests. Your data document · signature · transaction SHA-2562cf24dba5fb0…Fingerprint (hash) Timestamp token Time-Stamping Unit+ trusted UTC+ serial · policy HSMholds TSU keysigning inside Issuing CAonlineissues TSUcertificates TSU certificate TimeStampReqhash + nonce hash signature TimeStampResp(token) Your data is hashed locally and only the hash is sent to the SK Time-Stamping Unit. It adds trusted time, and the HSM signs with the TSU key. The token is returned. The Supporting PKI issued the TSU certificate in advance. YOUR SIDE (browser / app) SK TIME-STAMPING AUTHORITY TSA SERVICE SUPPORTING PKI Issues the TSU certificates in advance. Not involved in individual requests. Your data document · signature · transaction SHA-2562cf24dba5fb0…Fingerprint (hash) Timestamp token Time-Stamping Unit+ trusted UTC+ serial · policy HSMholds the TSU private keysigning happens inside Issuing CAonlineissues TSUcertificates TSU certificate TimeStampReqhash + nonce hash signature TimeStampResp (token)

DEMO endpoints

From the service technical information. All are reachable over HTTP and HTTPS and accept RFC 3161 application/timestamp-query POSTs.

URLKeySigner certificateIssuing CA

Use it from the command line

openssl ts -query -data file.pdf -sha256 -cert -out req.tsq
curl -s -H "Content-Type: application/timestamp-query" \
     --data-binary @req.tsq https://tsa.demo.sk.ee/tsa -o resp.tsr
openssl ts -reply -in resp.tsr -text

Common parameters

Policy OID
0.4.0.2023.1.1
Hash algorithms
SHA-256, SHA-384, SHA-512
Accuracy
1 second
Token contains
TSU certificate (no chain) when certReq = true
Production
timestamping.skidsolutions.eu — access by contract

Try it against the DEMO endpoints

Your data is hashed in this browser. Only the hash is sent to tsa.demo.sk.ee. DEMO tokens are signed by TEST certificates and have no legal effect.

Demo only. This service is available on a best-effort basis, and no responsibility is assumed for errors. Read the disclaimer

Endpoints