Method for generating a cryptographic time stamp (3, 7) for a digital document using a plurality of time servers (80, 81, 82), comprising: a) generating a nonce value and determining a current hash value by applying a predetermined hash function to the nonce value and to the digital document; b) repeatedly carrying out the following steps: b1) selecting one of the plurality of time servers (80, 81, 82), b2) transmitting the current hash value (30, 31, 32) to the selected time server (80, 81, 82), b3) receiving a response (40, 41, 42) which is created by the selected time server (80, 81, 82) and comprises a digital signature (60, 61, 62) of the current hash value (30, 31, 32) and a time specification (50, 51, 52), b4) determining a further hash value (31, 32) by applying the predetermined hash function to the received response (40, 41, 42), and b5) using the further hash value (31, 32) as the current hash value (31, 32); and c) forming the cryptographic time stamp (3, 7) for the digital document from the nonce value and the plurality of received responses (40, 41, 42), wherein in each step b4), the determination of the further hash value (31, 32) comprises generating a further nonce value (21, 22) and is carried out by applying the predetermined hash function to the further nonce value (21, 22) and to the received response (40, 41, 42), in step c), the cryptographic time stamp (3, 7) for the digital document is formed from the plurality of nonce values (20, 21, 22) and the plurality of received responses (40, 41, 42), and the cryptographic time stamp comprises a sequence of the plurality of nonce values (20, 21, 22), of the plurality of received digital signatures (60, 61, 62) and of the plurality of received time specifications (50, 51, 52). a) generating a nonce value and determining a current hash value by applying a predetermined hash function to the nonce value and to the digital document; b) repeatedly carrying out the following steps: b1) selecting one of the plurality of time servers (80, 81, 82), b2) transmitting the current hash value (30, 31, 32) to the selected time server (80, 81, 82), b3) receiving a response (40, 41, 42) which is created by the selected time server (80, 81, 82) and comprises a digital signature (60, 61, 62) of the current hash value (30, 31, 32) and a time specification (50, 51, 52), b4) determining a further hash value (31, 32) by applying the predetermined hash function to the received response (40, 41, 42), and b5) using the further hash value (31, 32) as the current hash value (31, 32); and b1) selecting one of the plurality of time servers (80, 81, 82), b2) transmitting the current hash value (30, 31, 32) to the selected time server (80, 81, 82), b3) receiving a response (40, 41, 42) which is created by the selected time server (80, 81, 82) and comprises a digital signature (60, 61, 62) of the current hash value (30, 31, 32) and a time specification (50, 51, 52), b4) determining a further hash value (31, 32) by applying the predetermined hash function to the received response (40, 41, 42), and b5) using the further hash value (31, 32) as the current hash value (31, 32); and c) forming the cryptographic time stamp (3, 7) for the digital document from the nonce value and the plurality of received responses (40, 41, 42), wherein in each step b4), the determination of the further hash value (31, 32) comprises generating a further nonce value (21, 22) and is carried out by applying the predetermined hash function to the further nonce value (21, 22) and to the received response (40, 41, 42), in step c), the cryptographic time stamp (3, 7) for the digital document is formed from the plurality of nonce values (20, 21, 22) and the plurality of received responses (40, 41, 42), and the cryptographic time stamp comprises a sequence of the plurality of nonce values (20, 21, 22), of the plurality of received digital signatures (60, 61, 62) and of the plurality of received time specifications (50, 51, 52).