5. Digital signature enhancements

5.1 Support for secure hash algorithm 3 (SHA-3) hash family

Delete all of clause 5.1.3 as follows:

5.1.3 Changes to ISO 32000-2:2020, Table 256 — Entries in a signature reference dictionary

In ISO 32000-2:2020, Table 256 (“Entries in a signature reference dictionary”; 12.8.1, “General”), the following text is added to the end of the current DigestMethod value text:

(PDF 2.x) In addition to those values previously defined, this value may be one of SHA3-256, SHA3-384, SHA3-512 or SHAKE256. Default value for PDF 2.0: SHA256 (PDF 2.0).

5.1.4 Changes to ISO 32000-2:2020, Table 260 — SubFilter value algorithm support

Change the last bullet point of the bullted list as follows:

  • ...
  • SHAKE256 (PDF 2.x). When SHAKE256 is specified, the message digest algorithm identified by the id-shake256 object identifier (OID) in section 2.3 of RFC 8419 shall be used used, the applicable stipulations on algorithm identifiers in RFC 8702, 3.1 and RFC 8419, 3.1, 3.2 shall be followed.

Last modified: 11 Sept 2024