What is "digidoc"

DigiDoc (Digital Document) is a family of digital signature- and cryptographic computing file formats utilizing public key infrastructure. It has currently two generations of sub formats, DDOC- and new binary based BDOC format that is supposed to replace the first generation DDOC. DigiDoc was created and is developed and maintained by RIA (Riigi Infosüsteemi Amet, Information System Authority of Estonia).

Format is mainly used to digitally sign and optionally encrypt any file(s) that are placed into given container that this file format is. Any cryptographic operation is done using national id card that has a chip with digital ceritifcates on hardware token to verify personal identity mathematically. Usually format is created on personal computer using qDigiDoc software or in web service using web browser and its plugin supporting signatures via PKCS 11 interface. During the signing, each signing party's certificate validity is checked using OCSP service and a copy of its signed ceritificate status statement is embedded into container for later verification.

Currently Estonian- and Finnish government issued cards work with qDigiDoc 3.x and later versions. Web services also utilize identity cards for session authentication using authentication certificate typically stored on personal id card.