search

w3c / vc-test-suite

Verifiable Credentials WG Test Suite
https://w3c.github.io/vc-test-suite/
BSD 3-Clause "New" or "Revised" License
68 stars 39 forks source link

Support for verification of signed Verifiable Credential #104

Open lucaalbinati opened 4 years ago

lucaalbinati commented 4 years ago

Hello,

I've currently finished integrating this test-suite to my implementation of W3C VerifiableCredentials. However, I'm also interested in finding out if my implementation signs a VC correctly. And if a signed VC from my implementation can be verified by someone else.

I'm searched online for libraries that would do such a thing and I've found a few that seem promising. However, they all differ in some way or another, and I'm afraid that none follow the official W3C specifications. Therefore, even if I pass their tests, that doesn't assure me that my implementation is compliant. Why leads me to my question: is there any plan on W3C's side to make such a library? (Or to integrate it with this one).

This would be extremely useful. I understand that W3C DIDs and VCs are still quite young. But I would argue that this is even more of a reason to establish such a library. Because, as of right now, many different libraries are doing their own thing, and an "official library" would help bring things together and avoid having many slightly different implementations in the future.

I haven't been able to find much information about this online, so I figured I'd ask here.

Thank you for your help.

David-Chadwick commented 4 years ago

Hi Luca

if you use JWT proofs then a good tool for checking the JWT overall is

https://jwt.io/

However, in terms of signature checking, it works if you can give it the public key in PKCS format, but not if the key is in the kid field only.

Kind regards

David

On 29/04/2020 23:45, Luca Albinati wrote:

Hello,

I've currently finished integrating this test-suite to my implementation of W3C VerifiableCredentials. However, I'm also interested in finding out if my implementation signs a VC correctly. And if a signed VC from my implementation can be verified by someone else.

I'm searched online for libraries that would do such a thing and I've found a few that seem promising. However, they all differ in some way or another, and I'm afraid that none follow the official W3C specifications. Therefore, even if I pass their tests, that doesn't assure me that my implementation is compliant. Why leads me to my question: is there any plan on W3C's side to make such a library? (Or to integrate it with this one).

This would be extremely useful. I understand that W3C DIDs and VCs are still quite young. But I would argue that this is even more of a reason to establish such a library. Because, as of right now, many different libraries are doing their own thing, and an "official library" would help bring things together and avoid having many slightly different implementations in the future.

I haven't been able to find much information about this online, so I figured I'd ask here.

Thank you for your help.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/w3c/vc-test-suite/issues/104, or unsubscribe https://github.com/notifications/unsubscribe-auth/AA33R7Z2RCQTV46L7IXYRGDRPAHL3ANCNFSM4MTUW7AQ.

lucaalbinati commented 4 years ago

Hello David,

Thank you for reaching back. Although I am aware that such tools exist, I feel like it would still be beneficial for W3C to offer an official test-suite, or at least to promote an already existing one (jwt.io for example). This is why I was asking if this was something W3C had thought about, and if so, what decision was reached?