v1.0.0

AsicSharp 1.0.0

First stable release of AsicSharp — a .NET library and CLI tool for creating and verifying ASiC-S containers with RFC 3161 timestamps.

Highlights

• ASiC-S container creation & verification compliant with ETSI EN 319 162-1 and EU eIDAS
• RFC 3161 timestamping proving data existed at a specific point in time, without requiring a signing certificate
• TSA fallback list — configure multiple Timestamp Authority URLs; if one is unavailable, the next is tried automatically
• Nonce support for replay protection on timestamp requests
• Optional CAdES signing when a signing certificate is provided
• META-INF/README.txt included in containers explaining the format and how to verify
• STRIDE threat model with in-depth security review
• Zip Slip protection — sanitized ZIP entry names prevent path traversal attacks
• Multi-target library — supports netstandard2.1, net8.0, and net10.0

Install

# CLI tool
dotnet tool install -g AsicSharp.Cli

# Library
dotnet add package AsicSharp

Usage

# Timestamp a file
asicts stamp document.pdf

# With fallback TSAs
asicts stamp document.pdf --tsa http://timestamp.digicert.com --tsa http://timestamp.sectigo.com

# Verify
asicts verify document.pdf.asics

Full changelog

• feat: initial release of AsicSharp
• feat: implement nonce support for RFC 3161 timestamp requests
• feat: add META-INF/README.txt and TSA fallback list
• fix: sanitize ZIP entry names to prevent path traversal (Zip Slip)
• docs: add STRIDE threat model and security documentation