PDF Security

All features and tool possibilities at a glance

Linux
MacOS
Windows Client
Windows Server
API
Shell tool (command line)
Watched folder (Windows only)
C/C++
Java
C#
.NET Core

Short facts

Conformance

  • ISO 32000-1 (PDF 1.7)

  • ISO 32000-2 (PDF 2.0)

  • ISO 19005‑1 (PDF/A‑1)

  • ISO 19005‑2 (PDF/A‑2)

  • ISO 19005‑3 (PDF/A‑3)

  • PAdES (ETSI EN 319 142) signature levels B-B, B-T, B-LT, B-LTA, CMS

  • Legacy PAdES baseline signature (ETSI TS 103 172) B-Level and T-Level

  • Legacy PAdES (ETSI TS 102 778) Part2 (PAdES Basic), Part3 (PAdES-BES), and Part4 (PAdES-LTV, Long Term Validation)

  • Long term signature profiles for PAdES (ISO 14533-3)

  • Cryptographic Suites (ETSI TS 119 312)

Supported formats

Input formats

  • PDF 1.0 to 1.7

  • PDF 2.0

  • PDF/A-1, PDF/A-2, PDF/A-3

Output formats

  • PDF 1.0 to 1.7

  • PDF 2.0

  • PDF/A-1, PDF/A-2, PDF/A-3

Features

Apply simple, advanced, and qualified electronic signatures

Main signature functionalities

  • PDF/A-conform signatures

  • Supporting European signature norms

  • Cache OCSP, CRL, and other data for mass signing

  • Custom signature handler plugin interface

  • Mass signing of documents (API)

  • Multiple signatures

Signature types

  • Document signatures to "digitally sign" documents

  • MDP (Modification detection & prevention) signatures to "certify" documents

  • Document time-stamp signatures to "time-stamp" documents

Apply PAdES-B-LTA and PAdES-LTV

  • Long-term availability and integrity of validation material

  • Long-term validation

  • Embedded trust chain, time-stamp, and revocation information (OCSP, CRL)

  • Lengthen the longevity of existing signatures

  • Add signature validation material to the document security store (DSS)

  • Add an optional visual appearance of the signature (page, size, color, position, text, background image, etc.)

Various types of cryptographic providers

  • Windows certificate store

  • Hardware such as hardware security module (HSM), smart cards, and USB tokens

  • Online signature services

    • QuoVadis sealsign

    • Swisscom All-in Signing Service

    • GlobalSign Digital Signing Service

Extract digital signatures

  • Validate digital signatures

  • Remove digital signatures

  • Extract signed version (revision) of document

Encrypt and decrypt PDF documents

  • Set document restrictions, including:

    • Print document

    • Modify document content

    • Extract or copy content

    • Add comments

    • Fill in form fields

    • Content extraction for accessibility

    • Assemble documents

    • Print in high resolution

  • Set crypt and stream filters

  • Set encryption strength

  • Set owner and user password

Stamping

  • Stamp text, images, or vector graphics

  • Add hyperlinks

  • PDF/A conform stamps

  • Modify existing stamps

  • Stamping of signed documents preserves existing signatures