ietf-wg-jose / json-web-proof

Specification work for JSON Web Proof
https://ietf-wg-jose.github.io/json-web-proof/
Other
98 stars 9 forks source link

Refactor algorithms to use multi-part proofs #123

Closed dwaite closed 2 months ago

dwaite commented 2 months ago

This is the implementation of the previous spec change describing proofs as being a sequence of octet strings, rather than a single octet string.

This change is meant to simplify parsing logic and to reduce the need to unpack dynamically sized buffers, especially in implementations using languages without protections from out-of-bound conditions.

  1. For BBS, I corrected examples to use a single-value array for the proof value.
  2. For Single Use, it was mostly a straight translation
  3. For MAC, I attempted to do a bit more of a cleanup.:
    • A new section was created describing a Combined MAC Representation, which synthesized by various operations to create or verify the issuer signature
    • Sections received a bit more work to unify around this concept
    • The section on verification was heavily reworked, as it described a process well beyond MAC validation.