Formal name
ETSI TS 119 312 v2.1.1 (2026-06) - Electronic Signatures and Trust Infrastructures (ESI); Cryptographic Suites
Overview
The present document lists cryptographic suites used for the creation and validation of digital signatures and electronic timestamps and related certificates. The present document builds on the agreed cryptographic mechanisms from SOG-IS. It may be used also for electronic registered delivery services in the future. In contrast to previous versions of the present document, specific end dates are provided.
The present document works on the assumption that the validity period (i.e. between notBefore and notAfter) of (qualified) end-entity certificates issued by trust services providers is typically three years. The present document focuses on interoperability issues and does not duplicate security considerations given by other standardization bodies, security agencies or supervisory authorities of the Member States. It instead provides guidance on the selection of concrete cryptographic suites that use agreed mechanisms.
The use of SOG-IS agreed mechanisms is meant to help ensure a high level of security in the recommended cryptographic suites, while the focus on specific suites of mechanisms is meant to increase interoperability and simplify design choices.
There is no normative requirement on selection among the alternatives for cryptographic suites given here but for all of them normative requirements apply to ensure security and interoperability. The present document also provides guidance on hash functions, (digital) signature schemes and (digital) signature suites to be used with the data structures used in the context of digital signatures and seals. For each data structure, the set of algorithms to be used is specified.
Work Plan
Current Version
EC Assessment Status
- The EC plans to assess ETSI TS 119 312 v2.1.1 but there is no timeline yet.
Forthcoming Version
Updates
- 2026-06-09: ETSI updated that the document was approved and is expected to be published before the end of June 2026 as v2.1.1.
- 2026-05-12: ETSI expects publication in June 2026.
- 2026-04-26: ETSI expects publication in May 2026.
- 2026-03-26: ETSI informed that it has reached a stable draft v1.5.3.
- 2026-03-10: ETSI updated that the revised draft (v1.5.2) is under review, and that ETSI aims publication of v2.1.1 in April 2026.
- 2025-07-31: ETSI updated that it is currently working on moving the guidance on cryptographic algorithms from being based on SOGIS to ECCG.
- 2024-12-09: ETSI published v1.5.1.
Alerts
There are no open alerts.
References
Formal name
ETSI TS 119 312 v2.1.1 (2026-06) - Electronic Signatures and Trust Infrastructures (ESI); Cryptographic Suites
Overview
The present document lists cryptographic suites used for the creation and validation of digital signatures and electronic timestamps and related certificates. The present document builds on the agreed cryptographic mechanisms from SOG-IS. It may be used also for electronic registered delivery services in the future. In contrast to previous versions of the present document, specific end dates are provided.
The present document works on the assumption that the validity period (i.e. between notBefore and notAfter) of (qualified) end-entity certificates issued by trust services providers is typically three years. The present document focuses on interoperability issues and does not duplicate security considerations given by other standardization bodies, security agencies or supervisory authorities of the Member States. It instead provides guidance on the selection of concrete cryptographic suites that use agreed mechanisms.
The use of SOG-IS agreed mechanisms is meant to help ensure a high level of security in the recommended cryptographic suites, while the focus on specific suites of mechanisms is meant to increase interoperability and simplify design choices.
There is no normative requirement on selection among the alternatives for cryptographic suites given here but for all of them normative requirements apply to ensure security and interoperability. The present document also provides guidance on hash functions, (digital) signature schemes and (digital) signature suites to be used with the data structures used in the context of digital signatures and seals. For each data structure, the set of algorithms to be used is specified.
Work Plan
Current Version
It is not referenced directly by any CIR (EU). It is referenced indirectly by EN 319 411-2 through EN 319 411-1.
EC Assessment Status
Forthcoming Version
Updates
Alerts
There are no open alerts.
References