Encryption
- The aim of data encryption is to render information illegible for strangers.
- At present, encryption using an ID card is intended for the secure transmission of data rather than for its long-term storage. A new encryption solution, which will also support long-term storage, is currently under development.
- An encryption algorithm is used for encryption. It is a mathematical formula that encrypts information. In the case of asymmetric encryption used with Estonia’s ID card, one key is used for encryption and another for decryption, one of which is a public key and the other a secret key in the sole possession of its user.
- For decryption with an ID card (i.e. for opening and reading an encrypted file), a secret key that corresponds to the public key in the authentication certificate and is located on the user’s ID card must be used. If a user loses his/her ID card, it is no longer possible to decrypt the information. It is also not possible to decrypt information that was encrypted with an earlier certificate after the user has renewed his/her ID card’s certificates. Upon the issuing of new certificates, a new public and secret key are also generated.
- Using the DigiDoc4 CRYPTO feature, the owner of the files adds the files intended for confidential transmission to an encrypted container, specifies the recipients (requiring the recipients' personal identification codes or, in the case of legal entities, their registration numbers), and encrypts the container. The encrypted container is then sent to the recipients, for example by email. Once encrypted, only the designated recipients can open the container using the document certificates specified during encryption (such as an ID card, Digi-ID or other supported authentication token).
- The DigiDoc software can be used for both encryption and decryption.
Last updated: 17.07.2026
