How esig/dss works
DSS is a Java framework for creating, extending, timestamping, and validating digital signatures and electronic attestations. Its principal workflow accepts documents and format-specific parameters, prepares data to sign, and produces a signed artifact; services also support signature extension and timestamping. ASiC adds a container workflow around CAdES/XAdES signatures, while mdoc and SD-JWT support attestation issuance and presentations. REST/SOAP remote attestation interfaces are present in the tree. The edges reflect sampled service behavior and documented product scope; wiring for unsampled modules is intentionally not inferred.
Main entry points: AbstractSignatureService.java Signature foundation · CAdESService.java CAdES service · XAdESService.java XAdES service · PAdESService.java PAdES service
Components 20
Signature formats
- Signature foundation
dss-document/src/main/java/eu/europa/esig/dss/signature/AbstractSignatureService.java - CAdES service
dss-cades/src/main/java/eu/europa/esig/dss/cades/signature/CAdESService.java - XAdES service
dss-xades/src/main/java/eu/europa/esig/dss/xades/signature/XAdESService.java - PAdES service
dss-pades/src/main/java/eu/europa/esig/dss/pades/signature/PAdESService.java - PDF engine
dss-pades-pdfbox/src/main/java/eu/europa/esig/dss/pdf/pdfbox/PdfBoxSignatureService.java - JAdES service
dss-jades/src/main/java/eu/europa/esig/dss/jades/signature/JAdESService.java - CB-AdES service
dss-cb-ades/src/main/java/eu/europa/esig/dss/cbades/signature/CBAdESService.java
ASiC containers
- ASiC handling
dss-asic-common/src/main/java/eu/europa/esig/dss/asic/common/ZipContainerHandler.java - ASiC CAdES
dss-asic-cades/src/main/java/eu/europa/esig/dss/asic/cades/signature/ASiCWithCAdESService.java - ASiC XAdES
dss-asic-xades/src/main/java/eu/europa/esig/dss/asic/xades/signature/ASiCWithXAdESService.java
Attestations
- mDoc service
dss-mdoc/src/main/java/eu/europa/esig/dss/attestation/mdoc/creation/MdocService.java - SD-JWT service
dss-sd-jwt/src/main/java/eu/europa/esig/dss/attestation/sd/jwt/creation/SDJWTService.java
Remote and validation
- Remote creation
dss-attestation-creation-remote/src/main/java/eu/europa/esig/dss/ws/attestation/creation/common/RemoteAttestationCreationServiceImpl.java - REST endpoint
dss-attestation-creation-rest/src/main/java/eu/europa/esig/dss/ws/attestation/creation/rest/RestAttestationCreationServiceImpl.java - SOAP endpoint
dss-attestation-creation-soap/src/main/java/eu/europa/esig/dss/ws/attestation/creation/soap/SoapAttestationCreationServiceImpl.java - Status validation
dss-attestation-revocation-cwt/src/main/java/eu/europa/esig/dss/attestation/revocation/cwt/validation/statuslist/CWTTokenStatusListValidator.java
Other components
- Application
- Certificate verifier
- Timestamp authority
- Signed artifact
Connections 36
- Application → CAdES service: requests signing
- Application → XAdES service: requests signing
- Application → PAdES service: requests signing
- Application → JAdES service: requests signing
- Application → CB-AdES service: requests signing
- Application → ASiC CAdES: requests container signing
- Application → ASiC XAdES: requests container signing
- Application → mDoc service: issues or presents
- Application → SD-JWT service: issues or presents
- CAdES service → Signature foundation: uses shared operations
- XAdES service → Signature foundation: uses shared operations
- PAdES service → Signature foundation: uses shared operations
- JAdES service → Signature foundation: uses shared operations
- CB-AdES service → Signature foundation: uses shared operations
- PAdES service → PDF engine: delegates PDF work
- ASiC CAdES → ASiC handling: builds container
- ASiC XAdES → ASiC handling: builds container
- ASiC CAdES → CAdES service: extends signatures
- ASiC XAdES → XAdES service: extends signatures
- REST endpoint → Remote creation
- SOAP endpoint → Remote creation
- Remote creation → mDoc service: creates attestations
- Remote creation → SD-JWT service: creates attestations
- Status validation → Certificate verifier
- Signature foundation → Certificate verifier: checks certificates
- CAdES service → Timestamp authority: requests timestamp
- XAdES service → Timestamp authority: requests timestamp
- CAdES service → Signed artifact: produces signature
- XAdES service → Signed artifact: produces signature
- PAdES service → Signed artifact: produces signature
- JAdES service → Signed artifact: produces signature
- CB-AdES service → Signed artifact: produces signature
- mDoc service → Signed artifact: produces attestation
- SD-JWT service → Signed artifact: produces attestation
- ASiC CAdES → Signed artifact: produces container
- ASiC XAdES → Signed artifact: produces container