Secure & Open Source

Nepal's Digital Signature
Desktop Agent

Drop-in replacement for DSigner with hardened security. Supports all government USB tokens, PAdES/XAdES/CAdES signatures, and backward-compatible WebSocket protocol.

🪟
Windows
.exe installer • Windows 10/11 (x64)
Download EXE
67 MB • Bundled JRE 21
SHA-256 ce87d5bd…0593d2bb
🍎
macOS
.dmg installer • macOS 12+
Download DMG
96 MB • Universal (Intel + Apple Silicon)
SHA-256 868947f5…01b881f1
🐧
Linux — Debian/Ubuntu
.deb package • amd64
Download DEB
76 MB • sudo dpkg -i govsign_*.deb
SHA-256 548c83fb…11e2f9b33
🎩
Linux — RHEL/Fedora
.rpm package • x86_64
Download RPM
95 MB • sudo rpm -i govsign-*.rpm
SHA-256 471a74ed…8696b29
🖥️
Server Agent — Windows
.zip • self-contained, no Java install • listens on :9090
Download ZIP
85 MB • v1.1.0 • unzip → run GovSignAgent.exe
SHA-256 ef4f9a57…d563bd30

Verify your download against SHA256SUMS.txt  ·  Integrating an app? See the Developer Portal & code samples →

🔐 Security Hardened

  • Per-install TLS certificate (ECDSA P-256)
  • SSRF protection via OutboundUrlGuard
  • No vendor lock-in or phone-home
  • Open source — fully auditable
  • XXE prevention on all XML parsing

🔌 Token Support (24 Drivers)

  • Longmai mToken CryptoIDA
  • Feitian ePass2003 / HyperPKI
  • YubiKey 5 (PIV)
  • SafeNet eToken
  • ProxKey, Watchdata, OpenSC + more

📋 Signature Formats

  • PAdES-B / T / LT / LTA (PDF)
  • XAdES (XML)
  • CAdES (CMS/PKCS#7)
  • ASiC-E / BDOC containers
  • Hashcode signing (server-side)

🔄 DSigner Compatible

  • Same WebSocket ports (8080, 1645, 1812, 2083, 2948)
  • Same protocol — signPdf, signForm, verifyPdf, verifyForm
  • Native cert picker popup (like DSigner)
  • System tray with auto-start
  • Zero changes needed in eBPS/LMBIS

GovSign vs DSigner

Feature DSigner (Radiant) GovSign
Cross-platform Windows only ✓ macOS, Linux, Windows
Per-install TLS cert ✗ Shared key ✓ ECDSA P-256
SSRF Protection ✗ Fetches any URL ✓ OutboundUrlGuard
Token drivers supported 2 (ePass, mToken) 24 drivers
PAdES-LTA (long-term archive) ✗ Basic only ✓ B / T / LT / LTA
Post-quantum ready ✗ No ✓ ML-DSA / Dilithium
Open source ✗ Proprietary ✓ Fully open
License check / phone-home Local serial key ✓ None — free forever

⚙️ System Requirements

Windows

Windows 10 (1809) or later. 64-bit. JRE bundled — no Java installation needed.

macOS

macOS 12 (Monterey) or later. Intel or Apple Silicon. First launch: right-click → Open (unsigned).

Linux

Ubuntu 22.04+ or Debian 12+. sudo dpkg -i govsign_*.deb. JRE bundled.

⚠️ Driver Note: GovSign does NOT install USB token drivers. You must install your token's PKCS#11 driver separately (from the CD or vendor website). GovSign auto-detects 24 driver types once installed.