suresh-subramanian 

Stampd domain types and contracts. Zero runtime dependencies.

EF Core DbContext, entity configurations, and provider-agnostic infrastructure for Stampd.

Generic configurable RFC 3161 timestamp authority provider for Stampd. Works with FreeTSA, DigiCert, GlobalSign, Sectigo, internal AD CS / OpenSSL TSAs — anything that speaks RFC 3161 over HTTP.

Azure Blob Storage-backed IDocumentStorageProvider. Stores signed documents in a configured container. Auth via DefaultAzureCredential (Managed Identity / workload identity / Azure CLI / env).

AWS S3-backed IDocumentStorageProvider. Stores signed documents in an S3 bucket. Supports SSE-S3 (default), SSE-KMS via a configured KMS key, and per-tenant key prefixes.

Knowledge-Based Authentication IIdentityVerificationProvider. Pluggable IKbaProvider abstraction for LexisNexis, Experian, Equifax, and similar commercial KBA backends; ships a MockKbaProvider for dev.

Local X.509 certificate ICryptographicSealingProvider for Stampd. Suitable for self-hosted production where the signing certificate is stored on disk or in the OS certificate store.

Google Cloud Storage-backed IDocumentStorageProvider. Auth via Application Default Credentials (workload identity, service-account file, gcloud).

SMTP IEmailSender for Stampd, backed by MailKit. Works against any RFC 5321 SMTP server: in-process dev tools (Hermex), corporate Postfix/Exchange, hosted SMTP (SendGrid SMTP, SES SMTP, Mailgun, etc.).

HashiCorp Vault / OpenBao Transit-backed ICryptographicSealingProvider. The signing key stays in Vault; this provider submits data to the Transit secrets engine for remote signing. Works against both HashiCorp... More information

PdfSharp + BouncyCastle implementation of IStampdEngine. Stamps signature collateral and applies PAdES signatures.

Microsoft SQL Server provider and migrations for Stampd.

SMS one-time-passcode IIdentityVerificationProvider. Pluggable ISmsGateway abstraction with adapters for Twilio and AWS SNS; ships a MockSmsGateway for dev.

SQLite provider and migrations for Stampd. Suitable for development, demos, and single-node deployments where Postgres or SQL Server would be overkill.

FreeTSA (freetsa.org) preset for Stampd's generic RFC 3161 timestamp authority provider. Suitable for development, demos, and self-hosted production where FreeTSA's terms of use are acceptable.

Filesystem-backed IDocumentStorageProvider for Stampd. Suitable for development, single-node deployments, and demos. Production setups should prefer Azure Blob or AWS S3 adapters.

Azure Key Vault HSM-backed ICryptographicSealingProvider. The signing key stays in the Key Vault HSM; this provider hashes locally and submits the digest for remote signing.

HTTP-based OCSP and CRL fetchers for Stampd's revocation pipeline. Used to embed revocation material into PAdES B-LT signatures.

PostgreSQL provider and migrations for Stampd.

AWS KMS-backed ICryptographicSealingProvider. The signing key stays in AWS KMS; this provider submits digests for remote signing via the KMS Sign API. Pairs with AWS-issued AATL-trusted certificates or... More information