ASiC: Associated Signature Containers

What is an Associated Signature Container?

An Associated Signature Container (ASiC) is a standardized digital package linking data files with associated signatures or time assertions. It uses a ZIP-based structure defined by ETSI EN 319 162-1; merely renaming an ordinary ZIP file does not make it a conforming ASiC container.

ASiC-S versus ASiC-E

• ASiC-S, or simple: associates one data file with the relevant signature or time-assertion material. That data file can itself be an archive containing several objects.
• ASiC-E, or extended: supports multiple data objects and associated signatures or time assertions under the applicable profile.

The distinction concerns container structure, not a universal difference in legal strength. A filename or extension alone does not establish that the contents conform or that every file has been signed.

What does the package preserve?

The container keeps payloads and their signature relationships together. It can use CAdES or XAdES signature structures and relevant time assertions. The exact objects covered must still be checked; packaging does not automatically prove identity, authority or qualified-signature status.

Extracting a document can make it readable, but that individual file is not necessarily the complete evidence package. Preserve the container, referenced objects and supporting material needed for validation.

Container versus long-term preservation

An ASiC package can carry material supporting later signature validation. Keeping a ZIP-based file is not, by itself, a guarantee of long-term verifiability. Validation still depends on its signatures, trust information, time evidence and applicable preservation process.