Malaysia E-Invoice digital signature docpptx

malaysia e-inv signature

1. X.509 certificate Invoice XML/ JSON Invoice XML/ JSON SHA256 DocDigest (document hash) (step 3) Sign Use cert Private key to Sign Sig (digital signature) (step 4) X.509 certificate SHA256 CertDigest (document hash) (step 5) Invoice XML/ JSON <Sign Properties> (step 6) SHA256 PropsDigest (Sign Propertie hash) (step 7) The whole cert without private key !! Certificate properties (Not the digital signature) (for xml) Get the properties tag only using the Xpath (/Invoice/ ext:UBLExtensions / ext:UBLExtension / ext:ExtensionContent / sig:UBLDocumentSignatures / sac:SignatureInformation / ds:Signature / ds:Object / xades:QualifyingProperties / xades:SignedProperties ) ( forj son) (Invoice/ UBLExtensions / UBLExtension / ExtensionContent / UBLDocumentSignatures / SignatureInformation /Signature/Object/ QualifyingProperties / SignedProperties ) Canonicalize  Public Key Private Key DocDigest (document hash) Sig (digital signature) CertDigest (document hash) PropsDigest (Sign Propertie hash) DocDigest (document hash) Sig (digital signature) CertDigest (document hash) PropsDigest (Sign Propertie hash) Base64 Base64 Base64 Base64 Step 8 For this step, remember to populate this part first (the digest value is blank), then extract the content to hash using SHA256. Populate this value into the SignatureInformation / SignedInfo /Reference/ DigestValue (another Digest value under Reference ( first one is DocDigest )