KeyBindingJwt should be verified with RSA or EC keys - Githubissues

eu-digital-identity-wallet / eudi-lib-jvm-sdjwt-kt

A library for issuing and verifying SD-JWT

Apache License 2.0

14 stars 4 forks source link

KeyBindingJwt should be verified with RSA or EC keys #186

Closed ydanneg closed 2 months ago

ydanneg commented 2 months ago

Currently KeyBindingJwt can only be verified with ECKey.

https://github.com/eu-digital-identity-wallet/eudi-lib-jvm-sdjwt-kt/blob/6fd337bd38c70f4b42db9b6c70171f931efab71f/src/main/kotlin/eu/europa/ec/eudi/sdjwt/NimbusIntegration.kt#L123

If holderPubKey is RSA it will throw class-cast exception.