Ministry of Science and Technology issues Circular regulating digital signature software and connection gateway

Improve technical standards and functional requirements for software

Circular 15/2025/TT-BKHCN sets higher and stricter technical requirements for digital signature and signature verification software. The Circular aims to ensure the legal value of electronic documents, protect users' rights and promote market development by raising user requirements.

For digital signature software : One of the important requirements is that the software must have the function of checking the validity of the digital signature certificate before allowing the user to perform digital signature. The software must also support timestamping when necessary and ensure the integrity of the data message after signing.

For digital signature verification software: The software must be able to verify digital signatures according to a "trusted path", ensuring that the signer's digital certificate is linked to the original digital signature certificate of the National Electronic Authentication Center (NEAC) or is on the foreign trusted list recognized by Vietnam. In particular, the software must display a notification of valid or invalid verification results in Vietnamese, along with detailed information about the signer, the time of signing, and the integrity of the data.

Update international standards: The Appendix of the Circular requires the application of new security standards, in which the minimum key length requirement for the RSA algorithm is 2048 bits and for ECDSA is 256 bits, and recommends the application of digital signature standards for PDF (PAdES), XML (XAdES) and CMS (CAdES) according to European standards.

Standardize Public Digital Signature Certification Service Connection

Centralized connection model: Circular introducing the Public Digital Signature Certification Service Connection Portal (abbreviated as eSign Portal) built by the Ministry of Science and Technology . This is a centralized connection portal, serving the connection of services of all organizations providing public digital signature certification services (CA) with information systems serving electronic transactions (such as Public Service Portal, banking systems, tax, customs, etc.).

Organizations providing public digital signature certification services and information systems serving electronic transactions using digital signatures connect to the eSign Portal to perform digital signatures. Connecting to a centralized system will help simplify the integration process for application development units (only need to connect to one focal point instead of connecting to each individual CA), while ensuring synchronization, safety and compatibility nationwide. The National Electronic Authentication Center (NEAC) is the focal point to support and guide the connection to the eSign Portal.

Quick to apply in practice

In order for the Circular to quickly become effective in practice, ensuring consistency in the deployment of digital signature software, digital signature verification and connection to public digital signature certification services, the National Electronic Authentication Center (NEAC) plays a pivotal role in organizing the implementation.

In the past time, NEAC has been compiling detailed guidance documents and a system of questions for organizations and individuals developing software, organizations providing digital signature certification services (CAs) and information system owners to properly implement the technical contents of the Circular. At the same time, the Center has also set up online channels to answer questions about procedures and standards for timely resolution.

In addition, NEAC will coordinate with press and media agencies to propagate and disseminate the content of the Circular to relevant parties, ensuring correct understanding and application of the regulations.

This Circular is based on the Law on Electronic Transactions 2023 and Decree 23/2025/ND-CP, creating a unified, safe and modern technical legal corridor for electronic transaction activities in Vietnam. This document officially takes effect from the date of signing and replaces Circular No. 22/2020/TT-BTTTT of the Ministry of Information and Communications , marking a new stage in the management and development of trusted services.

Circular No. 15/2025/TT-BKHCN is a solid legal and technical foundation, promoting standardization, ensuring transparency, and enhancing safety for all digital transactions of individuals and organizations in Vietnam. This is a strong signal promoting national digital trust, creating momentum for successful digital transformation./.