Cryptography and Provenance TWG
Background
The Cryptography and Provenance Technical Working Group (TWG) is a collaborative group of developers focused on content provenance, information security, authenticity of information and digital signatures. This Working Group replaced the Digital Signatures TWG in 2025.
PDF includes a rich set of capabilities pertaining to cryptography, including security and digital signature features such as encryption, timestamping, approval signatures and certification signatures. Taken together with the complexities of validating a PDF document with multiple signatures we’ve seen significant demand for interpretation and clarification of the specifications. This is an essential part of the work of the Cryptography and Provenance TWG.
Objective
Beyond PDF’s own definitions for including cryptographic technologies, the TWG addresses requirements related to the inclusion of C2PA data in PDF files, including development of guidance on ISO 22144, Authenticity of information – Content credentials and other related standards.
The TWG is also engaged in collecting requirements and discussing new feature requests for future enhancements of specifications and ISO standards pertaining to cryptography and provenance data in PDF.
Status
As of Q4 2025 key subjects currently under discussion include, but are not limited to:
- PQC (Post-Quantum-Cryptography), in particular for signatures
- ISO/TS 32001…32004 maintenance
Accomplishments
- ISO/TS 32001…32004
How to participate in the Working Group
It’s possible to participate in the Working Group without attending meetings!
- The Working Group’s activities are centered on a private GitHub repository.
- The Working Group’s mailing list offers an alternative channel for discussions.
- Working group members may attend the working group’s online meetings – currently every third Tuesday of the month, 1605–1700 CET / 1005–1100 ET / 0705–0800 PT, or review meeting notes and recordings of previous calls.
The Cryptography and Provenance TWG is open to all PDF Association Individual, Division, Full, Partner and Institutional members.
Join this working group to:
- Access all of the working group’s private GitHub repositories
- Access the working group’s private Google Drive area with working documents
- Participate via the mailing list and view mailing list archives
- Participate in the approval and publication process
- Access meeting recordings and notes
- Access and provide comments on related ISO documents
PDF Association members can join the Cryptography and Provenance TWG by visiting the Member Area and clicking “Manage Working Groups”.
