Circular regulating the technical aspects of digital signature software and connection ports

Circular 15 sets higher and stricter technical requirements for digital signature and digital signature verification software.

Circular No. 15 is a solid legal-technical foundation, promoting standardization, ensuring transparency, and enhancing safety for all digital transactions of individuals and organizations in Vietnam. This is a strong signal promoting national digital trust, creating momentum for successful digital transformation.

The Circular aims to ensure the legal value of electronic documents, protect users' rights and promote market development through raising user requirements.

Circular 15/2025/TT-BKHCN sets higher and stricter technical requirements for digital signature and digital signature verification software.

For digital signature software: One of the important requirements is that the software must have the function of checking the validity of the digital signature certificate before allowing the user to perform digital signature. The software must also support timestamping when necessary and ensure the integrity of the data message after signing.

For digital signature verification software: The software must be able to verify digital signatures according to a "trusted path", ensuring that the signer's digital certificate is linked to the original digital signature certificate of the National Electronic Authentication Center (NEAC) or is on the foreign trusted list recognized by Vietnam.

In particular, the software must display a valid or invalid check result notification in Vietnamese, along with detailed information about the signer, time of signing, and data integrity.

The Circular's appendix requires the application of new security standards, including a minimum key length requirement of 2048 bits for the RSA algorithm and 256 bits for ECDSA, and recommends the application of European digital signature standards for PDF (PAdES), XML (XAdES) and CMS (CAdES).

Circular introducing the Public Digital Signature Certification Service Connection Portal (abbreviated as eSign Portal) built by the Ministry of Science and Technology . This is a centralized connection portal, serving the connection of services of all Public Digital Signature Certification Service Providers (CAs) with information systems serving electronic transactions (such as Public Service Portals, banking systems, tax, customs, etc.).

Organizations providing public digital signature certification services and information systems serving electronic transactions using digital signatures connect to the eSign Portal to perform digital signatures.

Connecting to a centralized system simplifies the integration process for application developers (connecting to one hub instead of each individual CA), while ensuring consistency, security, and compatibility across the country.

The National Electronic Authentication Center (NEAC) is the focal point to support and guide the connection to the eSign Portal.

In order for Circular No. 15/2025/TT-BKHCN to quickly become effective in practice, ensuring consistency in the deployment of digital signature software, digital signature verification, and connection to public digital signature certification services, the National Electronic Authentication Center (NEAC) plays a key role in organizing the implementation.

In the past time, NEAC has been compiling detailed guidance documents and a system of questions for organizations and individuals developing software, organizations providing digital signature certification services (CAs) and information system owners to properly implement the technical contents of the Circular.

This Circular is based on the Law on Electronic Transactions 2023 and Decree 23/2025/ND-CP, creating a unified, safe and modern technical legal corridor for electronic transaction activities in Vietnam. This document officially takes effect from the date of signing and replaces Circular No. 22/2020/TT-BTTTT of the Ministry of Information and Communications , marking a new stage in the management and development of trusted services.

Circular No. 15/2025/TT-BKHCN is an important legal milestone, contributing to enhancing digital trust, protecting electronic transactions, and promoting the development of Vietnam's digital economy .

NEAC also established online channels to answer questions about procedures and standards for timely resolution. In addition, NEAC will coordinate with press and media agencies to disseminate and train the content of the Circular to relevant parties, ensuring correct understanding and application of regulations.

HIEP DUC

Source: https://nhandan.vn/thong-tu-quy-dinh-ky-thuat-phan-mem-ky-so-va-cong-ket-noi-post902035.html