2. The European Union Member States National Standardisation
Organisations have recently approved the XAdES specification published by ETSI as ETSI EN 319 132: "XAdES digital signatures" as an European Standard. XAdES is also being adopted as a proper signature format for OASIS ODF, and other relevant document formats, as OOXML. In fact, ISO is also incorporating XAdES as a signature format in a number of specifications: ISO/IEC JTC1 SC34/WG4 "Document description and processing languages" is now incorporating XAdES as a way of signing the
OXML documents whose format is standardizing. Other committees from ISO are also specifying XAdES profiles, as ISO TC 154 "Processes, data elements and documents in commerce, industry and administration". I would like to kindly request that ETSI EN 319 132 is included as an informative reference within the SMP specification.
ETSI EN 319 132 (XAdES digital signatures) is already supported by SMP 1.0 through the normative reference to, and use of XML DSig. Any user of SMP who wish to include XAdES in their implementation may do so freely and without restrictions using the current version of SMP (1.0). No change to the SMP specification is required for this.
The OASIS BDXR TC works on developing specifications that facilitate the exchange of business documents in a 4-cornered model. In this work we focus on the 4-cornered architecture, and leave specific policy decisions (such as whether to include XAdES profiles) for implementers to make based on their specific business requirements. Notwithstanding, we recognize the importance and relevance of XAdES and in our more recent specification for a Business Document Envelope (BDE) we have included XAdES schemas in the BDE schema tree for XML validation as a convenience to users choosing to implement XAdES. We will gladly consider a similar approach for the next version of SMP, which would then make a note on XAdES relevant for the SMP specification. I hope we may get back to you at that time to validate that we are including the correct versions etc. of XAdES.
On behalf of the TC I would like to use this opportunity to once again recognize the importance of XAdES, and to appreciate the work that ETSI is doing in this space.