search

bcgov / bc-wallet-mobile

BC Wallet to hold Verifiable Credentials
Apache License 2.0
60 stars 49 forks source link

Verification bug/fixed when using Aries Askar -- verification fails when presenting multiple revocable credentials #1248

Open swcurran opened 1 year ago

swcurran commented 1 year ago

A bug in Indy Shared RS's implementation of AnonCreds (called CredX) was found such that the verification of a presentation with more than one revocable credential would always fail, even if the credentials presented were not revoked. The bug is fixed in CredX release 0.3.0.

For Aries Askar deployments of BC Wallet, make sure that the 0.3.3 version of CredX is being used.

This bug MAY also be in the AnonCreds Rust library (issue being added). I'm not certain what is being used with Askar for AnonCreds in AFJ and hence, in BC Wallet.

cvarjao commented 11 months ago

I don't think AFJ uses CredX. We will double check