CZERTAINLY Signing 1.18.0 - Full support for Entrust SAM 1.1.1 🚀

[3keyroman]

🎉 CZERTAINLY Signing Release 1.18.0 is here!

Today we’re excited to roll out version 1.18.0, bringing full support for Entrust SAM v1.1.1, an upgraded AdES Signer, tighter security checks, and a host of quality-of-life fixes. Read on for the details—and be sure to upgrade soon to take advantage of the new capabilities.

---

🚀 Highlights

Area	What’s new
Entrust SAM 1.1.1	• 3072-bit RSA key support • RSASSA-PSS signature algorithm • Certified QSCD-ready integration
AdES Signer	• Now recognizes provider-specific signatures • New ENCRYPTIONALGORITHM property lets you specify the encryption algorithm per signature
Security & Dev Ops	• Build now fails on critical CVEs • Dependencies bumped to latest stable releases
Quality fixes	• Smooth handling of pre-generated dummy certificates in Entrust SAM Crypto Token

---

🛡️ Full Entrust SAM 1.1.1 support

With Entrust announcing QSCD certification for SAM v1.1.1, we have updated our integration to unlock its newest crypto features:

• 3072-bit RSA key pairs – stronger keys for high-security environments
• RSASSA-PSS – a modern padding scheme that meets today’s compliance standards

Simply point your configuration to an Entrust SAM 1.1.1 instance and you’re ready to issue QSCD-grade signatures.

---

✍️ Improved AdES Signer

The AdES Signer now automatically detects compatible signature providers and introduces a brand-new property ENCRYPTIONALGORITHM.

Specify any supported algorithm (e.g., RSASSA-PSS) to match your security policy. See the AdES Signer – Basic Properties guide for the full list and examples.

---

🐞 Bug fixes & minor improvements

• Reliable use of pre-generated dummy certificates in Entrust SAM Crypto Token
• Dependency refresh to the latest, stable versions
• Critical CVE scan: the build halts if a high-severity vulnerability is detected

---

Huge thanks to our community and contributors who provided feedback on the new Entrust SAM flow. Your reports and pull requests keep this project moving forward.

Happy signing!