search

spherity / eudi-wallet-rfcs

EU Digital Identity Wallet RFCs in EWC to align towards the Large Scale Pilot (LSP) usecases. The project is co-funded by the European Union.
https://eudiwalletconsortium.org/
Apache License 2.0
0 stars 0 forks source link

W3C Verifiable Credentials with Selective Disclosure #1

Open decentralgabe opened 2 months ago

decentralgabe commented 2 months ago

Reading Organisational Wallet Protocol and Format Discussion which compares credential formats, I noticed your points about wishing to use JSON-LD but also Selective Disclosure. Historically, doing both has been impossible in a standards based way.

I wanted to highlight the work that we are doing in the W3C Verifiable Credentials Working Group on Securing Verifiable Credentials using JOSE and COSE, which enables the use of SD-JWT with W3C VCs. This does require the use of the new version of the data mode, which is currently in Candidate Recommendation.

We are actively working on refining the spec and a corresponding test suite and would love to collaborate, if this is of interest to you. Let us know!

cc: @selfissued @brentzundel

informartin commented 2 months ago

Thanks for the tip! You are right, there has been a lot of discussion about Selective Disclosure in combination with JSON-LD. We are looking for cryptographic agility by using W3C credentials with Data Integrity Proofs. As a result, we can already provide Selective Disclosure based on ECDSA-SD and BBS.

However, there are restrictions on the accepted formats and cryptographic algorithms that we must adhere to. Since ECDSA-SD and BBS are not yet finalised and many implementations are based on SD-JWT, being able to secure W3C credentials using JOSE and COSE sounds like a great approach to us.

We would be happy to collaborate on this!