Updated eDelivery AS4 and SMP profiles

Image Added

The eDelivery AS4 2.0 and SMP 2.0 profiles (insert

...

links) have been updated to reflect comments (insert link) received during the 2023 public consultation. Look out for the upcoming consultation on eDelivery AS4 2.0 and SMP 2.0 profiles and find out about support towards their adoption!

Updated profiles

...

available

In our continuous commitment to develop state-of-the-art data exchange in the EU, the eDelivery team is delighted to share significant developments regarding the eDelivery AS4 2.0 and SMP 2.0 profiles. The 2.0 specifications will enable eDelivery to remain at the cutting-edge of security measures, adopting state-of-the-art protocols and algorithms as well as two new Profile Enhancements, one introducing ebCore Agreement Update and one supporting alternative curves and algorithms for encryption and digital signing. The new profile supports OASIS SMP version 2.0, allows publishing multiple certificates (signing, encryption and key exchange) for a transport and supports both eDelivery AS4 profiles 1.x and 2.0. The changes are detailed on both the Public Consultation and new Draft Specification pages.

The two proposed Draft Specifications were designed to work together. 

Following the June 2023 public review, we have meticulously addressed the feedback received and are excited to present the

...

updated eDelivery AS4 2.0 and SMP 2.0 specifications:

• eDelivery AS4 2.0 Specification (link tbc.)
• eDelivery SMP 2.0 Specification (link tbc.)

The 2.0 specifications will enable eDelivery to remain at the cutting-edge of security measures, adopting state-of-the-art protocols and algorithms. (insert section from previous post relating to improvements)

Transparency

...

Following the 2023 public consultation, where we received valuable feedback, the AS4 2.0 and SMP 2.0 specifications underwent some updates

...

.

...

Noteworthy responses from the consultation encompassed security choices, with insights from cryptography experts guiding our decisions. While key transport replacement was deliberated, we opted to adhere to the original proposal based on expert recommendations. Furthermore, we heeded

...

the suggestions by implementing the removal of SBDH as a profile enhancement in the new specification. The detailed disposition of public review comments is available on our website (insert link), offering transparency into our decision-making process.

To foster inclusivity and address any potential concerns, we invite you to participate in a

...

second public consultation on these updates from 8 March to 8 April 2024:

• eDelivery AS4 2.0 Specification consultation (link tbc.) 
• eDelivery SMP 2.0 Specification consultation (link tbc.)

Adoption in 2024

The community is invited to either post its feedback as comments on the public consultation pages linked above or send it by email to EC-EDELIVERY-SUPPORT@ec.europa.eu by 8 April 2024. After this date there is no certainty that proposed changes or suggestions could be implemented in the specifications. Your insights are invaluable as we strive for a seamless transition to the updated specifications in 2024.

...

Adoption in 2024

The final publication of the change will conclude the Specification Change Process and is expected soon after the second consultation. 

Image Added

We recommend that EC colleagues operating or preparing eDelivery-based ecosystems as well as eDelivery solution providers plan their adoption of the new specifications starting from now. Read about how eDelivery will support the adoption of these updated profiles. Exciting events, including meetings and an interoperability event, are on the horizon as we

...

take a step into the future with eDelivery in 2024.

Working towards adoption is particularly important as both the AS4 2.0 as well as the SMP 2.0 specifications mark a backwards-incompatible evolution of the profile. While the old 1.15 specifications will remain functional during the transitional period, backwards incompatibility means that Access Points operating with profile version 2.0 cannot exchange messages with Access Points operating with profile version 1.x and where SMP data compatible with profile version 2.0 cannot be consumed by legacy clients. 

The eDelivery Building Block  

eDelivery is a building block that provides technical specifications and standards, installable software and ancillary services to allow projects to create a network of nodes for secure digital data exchange.  

...