.png){kind=logo}
SignServer Community 7.1 Release Notes
COMMUNITY EDITION APRIL 2025
The SignServer team is pleased to announce the newest release of our open-source signing software SignServer Community Edition with version 7.1.
These release notes cover new SignServer Community features and improvements implemented between SignServer Community 7.0 and SignServer Community 7.1.
This latest community release includes support for NIST-approved quantum-safe algorithms ML-DSA and SLH-DSA, the first completed standards from NIST’s post-quantum cryptography (PQC) standardization project. The release also brings an updated version of Bouncy Castle.
Highlights
NIST Approved Quantum-Safe Algorithms ML-DSA and SLH-DSA
As of SignServer 7.1, NIST-approved implementations of both ML-DSA (FIPS 204) and SLH-DSA (FIPS 205) algorithms have been added. These will replace the Quantum candidate algorithms, Dilithium and SPHINCS+ that existed previously.
Bouncy Castle Upgrade
Bouncy Castle has been upgraded to version 1.79. For information about the latest Bouncy Castle releases, refer to the Bouncy Castle Release Notes.
Announcements
Security Issues
The SignServer team would like to thank an external reporter for notifying us about the potential for non-confidential information disclosure related to the REST API about the existence of workers which goes against OWASP best practices. This has been corrected as of SignServer 7.1.
Downloads and Resources
There are several options available for downloading the latest SignServer Community:
SignServer Community is available for download from GitHub.
SignServer Community container is available for download from Docker Hub.
SignServer Community container is available for download from the AWS marketplace.
SignServer Community is available for download from SourceForge.
Get the latest news about SignServer Community initiatives and open-source products - sign up for our community newsletter.
Find links to downloads, how-to guides, video tutorials, and documentation at signserver.org.
Want to learn more about our open source software? Get in touch over at SignServer Discussions on GitHub, a collective space where you can share feedback and contribute ideas to future releases. Thank you for your continued support and contributions to the SignServer community.