ISO/TS 32001:2022

Document management — Portable Document Format — Extensions to Hash Algorithm Support in ISO 32000-2 (PDF 2.0)

This document specifies how to extend the specifications in ISO 32000-2 by adding support for the use of the Secure Hash Algorithm – 3 (SHA-3) and SHAKE256 hash algorithms. This document does not specify the following: — specific processes for converting paper or electronic documents to the PDF file format; — specific technical design, user interface implementation, or operational details of rendering; — specific physical methods of storing these documents such as media and storage conditions; — methods for validating the conformance of PDF files or PDF processors; — required computer hardware and/or operating system

Gestion de documents — Format de document portable (PDF) — Extensions pour la prise en charge de l'algorithme de hachage dans l'ISO 32000-2 (PDF 2.0)

General Information

• Status: Published
• Publication Date: 07-Sep-2022
• ICS: 35.240.30 - IT applications in information, documentation and publishing
• ICS: 37.100.99 - Other standards related to graphic technology
• Technical Committee: ISO/TC 171/SC 2 - Document file formats, EDMS systems and authenticity of information
• Drafting Committee: ISO/TC 171/SC 2 - Document file formats, EDMS systems and authenticity of information
• Current Stage: 9093 - International Standard confirmed
• Start Date: 03-Dec-2025
• Completion Date: 14-Feb-2026

Overview

ISO/TS 32001:2022 is a technical specification from the International Organization for Standardization (ISO) that defines extensions to hash algorithm support in Portable Document Format (PDF) version 2.0, as specified in ISO 32000-2. This standard enhances document management by allowing the use of advanced hash algorithms, specifically the Secure Hash Algorithm 3 (SHA-3) family and SHAKE256. By formalizing support for these newer cryptographic algorithms, ISO/TS 32001:2022 helps ensure that PDF digital signatures remain secure and up to date with current cryptographic best practices.

Key Topics

• Extension of Hash Algorithm Support:
  The document establishes procedures for integrating SHA3-256, SHA3-384, SHA3-512, and SHAKE256 hash algorithms into digital signature components of PDF 2.0.

• Updates to Signature Field Dictionaries:
  ISO/TS 32001:2022 details necessary updates to signature field seed value dictionaries, signature reference dictionaries, and signature algorithm dictionaries, enabling support for the new hash methods.

• Alignment with Industry Standards:
  The standard references and aligns with FIPS PUB 202 (SHA-3 standard) and IETF RFC 8419 (EdDSA signatures in CMS), ensuring a globally recognized approach to secure document management.

• Scope Limitations:
  This document does not cover the conversion of documents to PDF, physical storage methods, or user interface implementations. It focuses solely on enhancing cryptographic algorithm options for PDF signatures.

Applications

• Digital Signature Security in PDF 2.0:
  Organizations leveraging PDF 2.0 for digital transactions and legally binding electronic documents benefit from improved cryptographic strength by adopting SHA-3 or SHAKE256 as their document hash algorithms.

• Regulated Document Management:
  Industries with strict information security requirements-such as legal, financial, and governmental sectors-can use this extension to ensure their PDF digital signatures comply with the latest security standards.

• Vendor and Developer Implementation:
  PDF processor developers and digital signature solution providers are equipped with clear instructions for incorporating SHA-3 family support, ensuring products remain interoperable and future-proof.

Related Standards

• ISO 32000-2:
  The foundational standard for PDF 2.0, specifying the portable document format and the framework for extensions like those in ISO/TS 32001:2022.

• FIPS PUB 202:
  The US National Institute of Standards and Technology (NIST) publication that standardizes the SHA-3 family of hash algorithms, referenced for algorithm definitions.

• IETF RFC 8419:
  Provides guidance for the use of EdDSA signatures in CMS, relevant for implementations leveraging the new hash algorithms in PDF digital signatures.

Practical Value

By adopting ISO/TS 32001:2022, organizations and solution providers can:

• Maintain cryptographic agility: Stay contemporary with evolving security threats by enabling newer and more resilient hash methods.
• Enhance interoperability: Align PDF products and workflows with the latest ISO and NIST standards, ensuring compatibility and compliance for both current and future requirements.
• Support secure digital workflows: Enable robust digital signing of PDF documents, critical for electronic records, contracts, and other high-trust applications.

For more details, consult ISO/TS 32001:2022 and its related supporting standards.

Standards Content (Sample)

TECHNICAL ISO/TS
SPECIFICATION 32001
First edition
2022-09
Document management — Portable
Document Format — Extensions to
Hash Algorithm Support in ISO 32000-
2 (PDF 2.0)
Gestion de documents — Format de document portable (PDF) —
Extensions pour la prise en charge de l'algorithme de hachage dans
l'ISO 32000-2 (PDF 2.0)
Reference number
© ISO 2022
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
Contents Page
Foreword .iv
Introduction .v
1 S c op e . 1
2 Nor m at i ve r ef er enc e s . 1
3 Terms and definitions . 1
4 E xtension schema details .1
5 Digital signature enhancements . .2
5.1 S upport for secure hash algorithm 3 (SHA-3) hash family . 2
5.1.1 G eneral . 2
5.1.2 Addition to ISO 32000-2:2020, Table 237 — Entries in a signature field
seed value dictionary . 2
5.1.3 Changes to ISO 32000-2:2020, Table 256 — Entries in a signature reference
dictionary . 2
5.1.4 Changes to ISO 32000-2:2020, Table 260 — SubFilter value algorithm
support . 2
Bibliography . 4
iii
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO's adherence to
the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see
www.iso.org/iso/foreword.html.
This document was prepared by Technical Committee ISO/TC 171, Document management applications,
Subcommittee SC 2, Document file formats, EDMS systems and authenticity of information.
Any feedback or questions on thi
...