pdftools_sdk.crypto.providers.provider

Classes

Provider(handle)

Base class for cryptographic providers

class pdftools_sdk.crypto.providers.provider.Provider(handle)

Bases: _NativeObject, ABC

Base class for cryptographic providers

The cryptographic provider manages certificates, their private keys and implements cryptographic algorithms.

This SDK supports various different cryptographic providers. The following list shows the signing certificate type that can be used for each provider.

• Soft Certificate: Soft certificates are typically PKCS#12 files that have the extension .pfx or .p12 and contain the signing certificate as well as the private key and trust chain (issuer certificates). Soft certificates can be used with the pdftools_sdk.crypto.providers.built_in.provider.Provider , where they can be loaded using pdftools_sdk.crypto.providers.built_in.provider.Provider.create_signature_from_certificate() .

• Hardware Security Module (HSM): HSMs always offer very good PKCS#11 support, so the pdftools_sdk.crypto.providers.pkcs11.session.Session is suitable. For more information and installation instructions, consult the separate document “TechNotePKCS11.pdf”.

• USB Token or Smart Card: These devices typically offer a PKCS#11 interface, so the recommended provider is the pdftools_sdk.crypto.providers.pkcs11.session.Session . Note that in any case, signing documents is only possible in an interactive user session. So these devices cannot be used in a service or web application environment.

• Swisscom Signing Service: The pdftools_sdk.crypto.providers.swisscom_sig_srv.session.Session supports both static and on-demand signing certificates.

• GlobalSign Digital Signing Service: The pdftools_sdk.crypto.providers.global_sign_dss.session.Session supports all features of the service.