w3c-ccg / did-spec

Please see README.md for latest version being developed by W3C DID WG.
https://w3c.github.io/did-core/
Other
124 stars 45 forks source link

Leverage RFC7518 to specify cryptographic algorithms #38

Closed AxelNennker closed 5 years ago

AxelNennker commented 6 years ago

Why not reference RFC7518 to specify cryptographic algorithms?

I think the did-spec should reference rfc7518 whenever cryptographic algorithm names need to be specified.

msporny commented 6 years ago

Linked Data Proofs, Linked Data Signatures, and the DID Spec specify "cryptographic suites". For example, these are all cryptographic suites mentioned by the current DID Spec:

Ed25519SignatureAuthentication2018, RsaSignatureAuthentication2018, Ed25519SignatureCapabilityAuthorization2018, etc.

The DID spec doesn't specify things at the RFC7518 level... but the cryptographic suites do, and yes, they should reference RFC7518 when possible.

This issue will be resolved by submitting a PR that adds a section titled "Relationship to JOSE", which should elaborate on these relationships.

jandrieu commented 5 years ago

Closing as we have adopted this issue in the new DIDWG repo.