EIDASVault: Especificaciones EUDI Wallet, Seguridad QSCD y Confianza Transfronteriza PQC

EIDASVault desarrolla Dispositivos Cualificados de Creación de Firma (QSCD) y Módulos de Seguridad de Hardware (HSM) certificados Common Criteria EAL4+/EAL6+ para el marco eIDAS 2.0 de la UE, Carteras de Identidad Digital Europea (EUDIW) y QTSP.

EIDASVault Trust Service Architecture & QSCD Silicon Topology

Common Criteria EN 419 221-5 compliant HSM, eIDAS 2.0 wallet bridge, and QTSP signing engine

Central System: Qualified Signature Core - EN 419 221-5 QSCD Engine

Cryptographic Nodes

  • Qualified HSM Enclave
  • EUDIW Wallet Bridge
  • Post-Quantum QES Signer
  • Qualified Timestamp Authority
  • Long-Term Validation Engine

Architectural Layers & Protocols

  • Hardware QSCD Boundary (Common Criteria EAL4+ / Protection Profile EN 419 221-5): Ensuring sole control of signing keys and physical tamper resistance under European law.
  • eIDAS 2.0 EUDIW Integration (OpenID4VP / ISO/IEC 18013-5 Mobile Driving Licence): Issuing and verifying Person Identification Data (PID) and Qualified Electronic Attestations of Attributes (QEAA).
  • Post-Quantum Signature Generation (FIPS 204 ML-DSA & FIPS 205 SLH-DSA): Creating legally binding Qualified Electronic Signatures (QES) with equivalent legal effect to handwritten signatures.
  • Long-Term Archive & Preservation (PAdES / CAdES LTA (Long-Term Availability)): Ensuring electronic signatures and legal documents remain verifiable for 30+ years using quantum-safe timestamps.

Key Metrics: eIDAS 2.0 (European Regulatory Target) | EN 419 221-5 (QSCD Protection Profile) | QES Grade (Legal Signature Equivalence) | 30+ Years (LTA Archive Longevity)

Dispositivo Cualificado de Creación de Firma Electrónica (QSCD) con HSMs Poscuánticos y Cartera Europea de Identidad Digital eIDAS 2.0 (EUDIW)

Referencia técnica de ingeniería autorizada para qualified electronic signature creation device (qscd) post-quantum hsms & eidas 2.0 european digital identity wallet (eudiw) en estándares NIST FIPS 203/204/205, criptografía basada en retículos y mitigación de canales laterales.

Core Engineering Areas

Technical Articles

Related Cluster Architecture Specifications