A double authentication system, DAS, for electronically signing a first data from a user, wherein the user has a smart card, SC, having a personal identification number, PIN, the DAS comprising: a client module, wherein the client module is configured to be in signal communication with the smart card; a high assurance signing service, HASS, module, wherein the HASS module is in signal communication with the client module, and is configured to receive the first data, and, in response, query the user for a confirmation that the first data is to be electronically signed; and a hardware security module, HSM,, wherein the HSM is in signal communication with the HASS module, has a private key, and is configured to receive a HSM package from the HASS module, in response, produce a HSM encrypted hash value from the HSM package with the private key of the HSM, and pass the HSM encrypted hash value to the HASS module, wherein the HASS module is configured to produce the HSM package from at least the first data, wherein the HASS module is also configured to produce a HSM signed package that includes the HSM package combined with the HSM encrypted hash value and pass the HSM signed package to the client module, wherein the client module is configured to query the user for the PIN of the SC, in response, pass the HSM signed package to the smart card for production of a SC encrypted hash value corresponding to the HSM signed package, receive the SC encrypted hash value, and pass the SC encrypted hash value to the HASS module, and wherein the HASS module is configured to receive the SC encrypted hash value and, in response, produce a high assurance signed package, HAS package, from the HSM signed package and the SC encrypted hash value. a client module, wherein the client module is configured to be in signal communication with the smart card; a high assurance signing service, HASS, module, wherein the HASS module is in signal communication with the client module, and is configured to receive the first data, and, in response, query the user for a confirmation that the first data is to be electronically signed; and a hardware security module, HSM,, wherein the HSM is in signal communication with the HASS module, has a private key, and is configured to receive a HSM package from the HASS module, in response, produce a HSM encrypted hash value from the HSM package with the private key of the HSM, and pass the HSM encrypted hash value to the HASS module, wherein the HASS module is configured to produce the HSM package from at least the first data, wherein the HASS module is also configured to produce a HSM signed package that includes the HSM package combined with the HSM encrypted hash value and pass the HSM signed package to the client module, wherein the client module is configured to query the user for the PIN of the SC, in response, pass the HSM signed package to the smart card for production of a SC encrypted hash value corresponding to the HSM signed package, receive the SC encrypted hash value, and pass the SC encrypted hash value to the HASS module, and wherein the HASS module is configured to receive the SC encrypted hash value and, in response, produce a high assurance signed package, HAS package, from the HSM signed package and the SC encrypted hash value.