CAdES vs XAdES: Why Choosing the Wrong Java Digital Signature Format Costs You

CAdES and XAdES are two distinct ETSI-compliant digital signature formats used in Java applications, and they are not interchangeable despite both being labeled 'advanced signatures.' CAdES, governed by ETSI EN 319 122, produces binary files and is suited for signing PDFs and other binary documents, while XAdES, governed by ETSI EN 319 132, produces XML and is widely used for electronic invoicing and XML contracts. The formats differ fundamentally in structure, file output, and the systems that can parse them, meaning a cryptographically valid signature can still fail validation if the wrong format was used. In several Latin American countries, for example, electronic invoicing systems specifically require XAdES because the invoice is already an XML document expecting an embedded signature node. Selecting the correct format must be determined upfront based on regulatory requirements and the receiving system's expectations, not patched after a validation error is returned.