search

eu-digital-identity-wallet / eudi-doc-architecture-and-reference-framework

The European Digital Identity Wallet
https://eu-digital-identity-wallet.github.io/eudi-doc-architecture-and-reference-framework/
Other
432 stars 60 forks source link

Consider Post-Quantum Cryptography (PQC) #105

Open cyberphone opened 10 months ago

cyberphone commented 10 months ago

With the anticipated arrival of Post-Quantum Cryptography (PQC) requiring massive amounts of binary data, CBOR will prove to be a better choice than JSON.

See also: https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/issues/100

andrea-dintino commented 10 months ago

We are working on our EUDI-ARF compatible open source identity solution (https://forkbomb.solutions/solution/didroom), the core component is our crypto virtual machine Zenroom which already supports some of the NIST PQC competition winners (Dilithium, Kyber, NTRU, we're also looking at Sphincs+), see https://dev.zenroom.org/#/pages/zencode-scenarios-qp

digeorgi commented 2 months ago

Thank you very much for your comment. The ARF references ISO/IEC 18013-5 and SD-JWT for attestation formats. These standards also specify which encoding must be used for these attestations. The standardisation committees behind these standards are very much aware of the developments regarding data encodings, and are in the best position to determine which encoding is most suitable for their attestations.

We therefore do not see a need to specify the use of a specific encoding in the ARF itself. We will, however, keep following developments and stay in touch with standardisation organisations regarding this topic.