# eIDAS Qualified Timestamp Support ## Module __Libraries ## Status IMPLEMENTED ## Description Full eIDAS qualified timestamp signing and verification provider with TSP client integration. ## Implementation Details - **EidasCryptoProvider**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/EidasCryptoProvider.cs` -- main eIDAS crypto plugin - **EidasSigner**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/EidasSigner.cs` -- signing implementation with `.Export.cs` for key export - **LocalEidasProvider**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/LocalEidasProvider.cs` -- local eIDAS operations: `.Signing.cs` (local signing), `.Verification.cs` (local verification) - **TrustServiceProviderClient**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/TrustServiceProviderClient.cs` -- TSP client for qualified timestamps: `.Signing.cs` (request timestamp from TSA), `.Verification.cs` (verify qualified timestamps against EU Trust List) - **TspResponses**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/TspResponses.cs` -- TSP response models - **Configuration**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/` -- `EidasOptions.cs`, `EidasKeyConfig.cs`, `LocalSigningOptions.cs`, `TrustedListOptions.cs`, `TspOptions.cs`, `SignatureLevel.cs` - **DI Registration**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/ServiceCollectionExtensions.cs` - **Tests**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS.Tests/` - **Source**: Feature matrix scan ## E2E Test Plan - [ ] Verify TSP client can request qualified timestamps from a TSA endpoint - [ ] Test timestamp verification against EU Trust List entries - [ ] Verify local signing with eIDAS-compliant key material - [ ] Test local verification of eIDAS signatures - [ ] Verify EidasOptions configures TSA endpoint, key, and signature level correctly - [ ] Test TrustServiceProviderClient handles TSP response parsing - [ ] Verify qualified timestamp tokens contain correct OIDs - [ ] Test DI registration via ServiceCollectionExtensions