Core engineering and protocols for QSCD Hardware Security Modules.
Under eIDAS Article 25, a Qualified Electronic Signature (QES) possesses the exact same legal effect as a handwritten pen-and-paper signature in all EU courts. To generate a QES, European law requires the signature to be created using a certified Qualified Signature Creation Device (QSCD) operated by an accredited Qualified Trust Service Provider (QTSP).
EIDASVault meets the rigorous CEN EN 419 221-5 protection profile. It implements remote signature creation protocols (SCDev) where the user authorizes the signing transaction via a secure Signature Activation Module (SAM). The internal crypto engine executes FIPS 204 ML-DSA-87 signatures inside an impenetrable EAL4+ hardware perimeter.