From 4b114eac174ba1cac42ad89ffcc5bf8d2108f76d Mon Sep 17 00:00:00 2001
From: "Michael B. Jones"
The most specific media type (or subtype) available SHOULD be used, instead of
more generic media types (or supertypes). For example, rather than the general
-
- The Securing the VC Data Model
application/sd-jwt
, application/vc+ld+json+sd-jwt
+ application/sd-jwt
, application/vc-ld+sd-jwt
SHOULD be used, unless there is a more specific media type that would even
better identify the secured envelope format.
Securing JSON-LD Verifiable Credentials with JOSE
typ
header parameter SHOULD be vc+ld+json+jwt
.
- When present, the cty
header parameter SHOULD be vc+ld+json
.
+ The typ
header parameter SHOULD be vc-ld+jwt
.
+ When present, the cty
header parameter SHOULD be vc
.
See Registered Header Parameter Names
for additional details regarding usage of typ
and
cty
.
@@ -315,8 +308,8 @@ Securing JSON-LD Verifiable Presentations with J
The unsecured verifiable presentation is the unencoded JWS payload.
- The typ
header parameter SHOULD be vp+ld+json+jwt
.
- When present, the cty
header parameter SHOULD be vp+ld+json
.
+ The typ
header parameter SHOULD be vp-ld+jwt
.
+ When present, the cty
header parameter SHOULD be vp
.
See Registered Header Parameter Names
for additional details regarding usage of typ
and
cty
.
@@ -347,7 +340,7 @@
- The typ
header parameter SHOULD be vc+ld+json+sd-jwt
.
- When present, the cty
header parameter SHOULD be vc+ld+json
.
+ The typ
header parameter SHOULD be vc-ld+sd-jwt
.
+ When present, the cty
header parameter SHOULD be vc
.
See Registered Header Parameter Names
for additional details regarding usage of typ
and
cty
.
@@ -501,8 +494,8 @@
- The typ
header parameter SHOULD be vp+ld+json+sd-jwt
.
- When present, the cty
header parameter SHOULD be vp+ld+json
.
+ The typ
header parameter SHOULD be vp-ld+sd-jwt
.
+ When present, the cty
header parameter SHOULD be vp
.
See Registered Header Parameter Names
for additional details regarding usage of typ
and
cty
.
@@ -532,7 +525,7 @@
- This section details how to secure data with the type
- application/vc+ld+json
- with COSE.
+ This section details how to use COSE to secure verifiable credentials conforming
+ to [[VC-DATA-MODEL-2.0]].
A [=conforming COSE issuer implementation=] MUST use COSE_Sign1 as specified in [[RFC9052]] to secure @@ -572,9 +564,9 @@
- The typ
header parameter as described in COSE "typ" (type) Header Parameter SHOULD be application/vc+ld+json+cose
.
+ The typ
header parameter, as described in COSE "typ" (type) Header Parameter, SHOULD be application/vc-ld+cose
.
When present, the content type (3)
header parameter
- SHOULD be application/vc+ld+json
.
+ SHOULD be application/vc
.
See Common COSE Header Parameters for additional details.
@@ -626,8 +618,8 @@
- The typ
header parameter SHOULD be application/vp+ld+json+cose
.
- When present, the cty
header parameter SHOULD be application/vp+ld+json
.
+ The typ
header parameter SHOULD be application/vp-ld+cose
.
+ When present, the cty
header parameter SHOULD be application/vp
.
See Common COSE Header Parameters for additional details.
@@ -655,7 +647,7 @@
The normative statements in Securing
Mechanisms apply to securing
- application/vc+ld+json
and
- application/vp+ld+json
,
- application/vc+ld+json+sd-jwt
and
- application/vp+ld+json+sd-jwt
,
+ application/vc-ld+jwt
and
+ application/vp-ld+jwt
,
+ application/vc-ld+sd-jwt
and
+ application/vp-ld+sd-jwt
,
as well as
- application/vc+ld+json+cose
and
- application/vp+ld+json+cose
.
+ application/vc-ld+cose
and
+ application/vp-ld+cose
.
JSON Web Token implementers are advised to review Implementation
@@ -1481,10 +1473,10 @@
This specification registers the
-
This specification registers the
-
This specification registers the
-
This specification registers the
-
This specification registers the
-
This specification registers the
-
- This specification registers the
- As defined in this specification. See also the security
- considerations in and [[json-ld11]].
- This specification registers the
- As defined in this specification. See also the security
- considerations in .
- This specification registers the
- As defined in this specification. See also the security
- considerations in .
- This specification registers the
- As defined in this specification. See also the security
- considerations in .
- This specification registers the
- As defined in this specification. See also the security
- considerations in [[RFC9052]] and [[json-ld11]].
- This specification registers the
- As defined in this specification. See also the security
- considerations in [[RFC9052]].IANA Considerations
Media Types
+ application/vc+ld+json+jwt
application/vc-ld+jwt
application/vc+ld+json+jwt
Media Type specifically for
+ application/vc-ld+jwt
Media Type specifically for
identifying a
with a payload
conforming to the Verifiable Credential Data Model.
@@ -1496,7 +1488,7 @@ application/vc+ld+json+jwt
Subtype name:
- `vc+ld+json+jwt`
+ `vc-ld+jwt`
Required parameters:
@@ -1527,10 +1519,10 @@ application/vc+ld+json+jwt
+ application/vp+ld+json+jwt
application/vp-ld+jwt
application/vp+ld+json+jwt
Media Type specifically for
+ application/vp-ld+jwt
Media Type specifically for
identifying a
with a payload
conforming to Verifiable Presentations.
@@ -1542,7 +1534,7 @@ application/vp+ld+json+jwt
Subtype name:
- vp+ld+json+jwt
+ vp-ld+jwt
Required parameters:
@@ -1573,10 +1565,10 @@ application/vp+ld+json+jwt
+ application/vc+ld+json+sd-jwt
application/vc-ld+sd-jwt
application/vc+ld+json+sd-jwt
Media Type specifically for
+ application/vc-ld+sd-jwt
Media Type specifically for
identifying a
with a payload
conforming to the Verifiable Credential Data Model.
@@ -1588,7 +1580,7 @@ application/vc+ld+json+sd-jwt
Subtype name:
- `vc+ld+json+sd-jwt`
+ `vc-ld+sd-jwt`
Required parameters:
@@ -1619,10 +1611,10 @@ application/vc+ld+json+sd-jwt
+ application/vp+ld+json+sd-jwt
application/vp-ld+sd-jwt
application/vp+ld+json+sd-jwt
Media Type specifically for
+ application/vp-ld+sd-jwt
Media Type specifically for
identifying a
with a payload
conforming to Verifiable Presentations.
@@ -1634,7 +1626,7 @@ application/vp+ld+json+sd-jwt
Subtype name:
- vp+ld+json+sd-jwt
+ vp-ld+sd-jwt
Required parameters:
@@ -1665,10 +1657,10 @@ application/vp+ld+json+sd-jwt
+ application/vc+ld+json+cose
application/vc-ld+cose
application/vc+ld+json+cose
Media Type specifically for
+ application/vc-ld+cose
Media Type specifically for
identifying a COSE object [[RFC9052]]
with a payload
conforming to the Verifiable Credential Data Model.
@@ -1680,7 +1672,7 @@ application/vc+ld+json+cose
Subtype name:
- `vc+ld+json+cose`
+ `vc-ld+cose`
Required parameters:
@@ -1710,10 +1702,10 @@ application/vc+ld+json+cose
+ application/vp+ld+json+cose
application/vp-ld+cose
application/vp+ld+json+cose
Media Type specifically for
+ application/vp-ld+cose
Media Type specifically for
identifying a COSE object [[RFC9052]]
with a payload
conforming to Verifiable Presentations.
@@ -1725,7 +1717,7 @@ application/vp+ld+json+cose
Subtype name:
- `vp+ld+json+cose`
+ `vp-ld+cose`
Required parameters:
@@ -1755,333 +1747,6 @@
- application/vp+ld+json+cose
Structured Syntax Suffixes
-
-
- +ld+json+jwt
+ld+json+jwt
Structured Suffix
- in the IANA "Structured Syntax Suffixes" registry [[IANA-STRUCTURED-SUFFIX]]
- for indicating that the media type is encoded as
- a
- with a JSON-LD payload.
-
-
-
-
- Name:
- `ld+json+jwt`
-
-
- +suffix:
- `+ld+json+jwt`
-
-
- References:
- this specification
-
-
- Encoding considerations:
-
- binary; `jwt` values are a series of base64url-encoded values
- (some of which may be the empty string) separated by period ('.').
-
-
-
- Security considerations:
-
-
-
-
- Contact:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
-
- Author/Change Controller:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
- +json+jwt
+json+jwt
Structured Suffix
- in the IANA "Structured Syntax Suffixes" registry [[IANA-STRUCTURED-SUFFIX]]
- for indicating that the media type is encoded as
- a
- with a JSON payload.
-
-
-
-
- Name:
- json+jwt
-
-
- +suffix:
- `+json+jwt`
-
-
- References:
- this specification
-
-
- Encoding considerations:
-
- binary; `jwt` values are a series of base64url-encoded values
- (some of which may be the empty string) separated by period ('.').
-
-
-
- Security considerations:
-
-
-
-
- Contact:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
-
- Author/Change Controller:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
- +ld+json+sd-jwt
+ld+json+sd-jwt
Structured Suffix
- in the IANA "Structured Syntax Suffixes" registry [[IANA-STRUCTURED-SUFFIX]]
- for indicating that the media type is encoded as
- an
- with a JSON-LD payload.
-
-
-
-
- Name:
- `ld+json+sd-jwt`
-
-
- +suffix:
- `+ld+json+sd-jwt`
-
-
- References:
- this specification
-
-
- Encoding considerations:
-
- binary; `sd-jwt` values are a series of base64url-encoded values
- (some of which may be the empty string) separated by period ('.') or tilde ('~') characters.
-
-
-
- Security considerations:
-
-
-
-
- Contact:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
-
- Author/Change Controller:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
- +json+sd-jwt
+json+sd-jwt
Structured Suffix
- in the IANA "Structured Syntax Suffixes" registry [[IANA-STRUCTURED-SUFFIX]]
- for indicating that the media type is encoded as
- an
- with a JSON payload.
-
-
-
-
- Name:
- json+sd-jwt
-
-
- +suffix:
- `+json+sd-jwt`
-
-
- References:
- this specification
-
-
- Encoding considerations:
-
- binary; `sd-jwt` values are a series of base64url-encoded values
- (some of which may be the empty string) separated by period ('.') or tilde ('~') characters.
-
-
-
- Security considerations:
-
-
-
-
- Contact:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
-
- Author/Change Controller:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
- +ld+json+cose
+ld+json+cose
Structured Suffix
- in the IANA "Structured Syntax Suffixes" registry [[IANA-STRUCTURED-SUFFIX]]
- for indicating that the media type is encoded as
- a COSE object [[RFC9052]]
- with a JSON-LD payload.
-
-
-
-
- Name:
- `ld+json+cose`
-
-
- +suffix:
- `+ld+json+cose`
-
-
- References:
- this specification
-
-
- Encoding considerations:
-
- binary (CBOR)
-
-
-
- Security considerations:
-
-
-
-
- Contact:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
-
- Author/Change Controller:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
- +json+cose
+json+cose
Structured Suffix
- in the IANA "Structured Syntax Suffixes" registry [[IANA-STRUCTURED-SUFFIX]]
- for indicating that the media type is encoded as
- a COSE object [[RFC9052]]
- with a JSON payload.
-
-
-
-
- Name:
- json+cose
-
-
- +suffix:
- `+json+cose`
-
-
- References:
- this specification
-
-
- Encoding considerations:
-
- binary (CBOR)
-
-
-
- Security considerations:
-
-
-
-
- Contact:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
-
-
- Author/Change Controller:
-
- W3C Verifiable Credentials Working Group public-vc-wg@w3.org
-
- Other Considerations
@@ -2401,17 +2066,17 @@ Presentations
"verifiableCredential": [
{
"@context": "https://www.w3.org/ns/credentials/v2",
- "id": "data:application/vc+ld+json+cose;base64url,QzVjV...RMjU",
+ "id": "data:application/vc-ld+cose;base64url,QzVjV...RMjU",
"type": "EnvelopedVerifiableCredential"
},
{
"@context": "https://www.w3.org/ns/credentials/v2",
- "id": "data:application/vc+ld+json+jwt;eyVjV...RMjU",
+ "id": "data:application/vc-ld+jwt;eyVjV...RMjU",
"type": "EnvelopedVerifiableCredential"
},
{
"@context": "https://www.w3.org/ns/credentials/v2",
- "id": "data:application/vc+ld+json+sd-jwt;eyVjV...RMjU",
+ "id": "data:application/vc-ld+sd-jwt;eyVjV...RMjU",
"type": "EnvelopedVerifiableCredential"
}
]
@@ -2423,11 +2088,11 @@ Presentations
Data URIs
-data:application/vc+ld+json+sd-jwt;eyJhbGciOiJFUzM4NCIsImtpZCI6IlNJM1JITm91aDhvODFOT09OUFFVQUw3RWdaLWtJNl94ajlvUkV2WDF4T3ciLCJ0eXAiOiJ2YytsZCtqc29uK3NkLWp3dCIsImN0eSI6InZjK2xkK2pzb24ifQ.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.rYzbxb6j1dwop8_s491iArVVJNm6A6C3b742gOm_qYO3zdkyQU4_VxxOSJ8ECcmWj2r5KyiCNC1ojfO4Yms-zBsjt7PoMYpYWBplsqXpiIvnehmM7D0eOLi40uHXki0X~WyJSWTg1YTZNMmEwX3VDWlFTVGZmTFdRIiwgImlkIiwgImh0dHA6Ly91bml2ZXJzaXR5LmV4YW1wbGUvY3JlZGVudGlhbHMvMTg3MiJd~WyJMeG5GYTBXVm8wRUluVy1QdS1fd1dRIiwgInR5cGUiLCBbIlZlcmlmaWFibGVDcmVkZW50aWFsIiwgIkV4YW1wbGVBbHVtbmlDcmVkZW50aWFsIl1d~WyJUQVdrakpCaVpxdC1rVU54X1EweUJBIiwgImlkIiwgImh0dHBzOi8vZXhhbXBsZS5vcmcvZXhhbXBsZXMvZGVncmVlLmpzb24iXQ~WyJTd2xuZFpPZzZEZ1ZERFp5X0RvYVFBIiwgInR5cGUiLCAiSnNvblNjaGVtYSJd~WyJuSnJlU3E1Nzg3RGZMSDJCbU03cXFRIiwgImlkIiwgImRpZDpleGFtcGxlOjEyMyJd~WyIxMjNNd3hNcHRiek02YUk2aW03ME1RIiwgInR5cGUiLCAiQmFjaGVsb3JEZWdyZWUiXQ
+data:application/vc-ld+sd-jwt;eyJhbGciOiJFUzM4NCIsImtpZCI6IlNJM1JITm91aDhvODFOT09OUFFVQUw3RWdaLWtJNl94ajlvUkV2WDF4T3ciLCJ0eXAiOiJ2YytsZCtqc29uK3NkLWp3dCIsImN0eSI6InZjK2xkK2pzb24ifQ.eyJAY29udGV4dCI6WyJodHRwczovL3d3dy53My5vcmcvbnMvY3JlZGVudGlhbHMvdjIiLCJodHRwczovL3d3dy53My5vcmcvbnMvY3JlZGVudGlhbHMvZXhhbXBsZXMvdjIiXSwiaXNzdWVyIjoiaHR0cHM6Ly91bml2ZXJzaXR5LmV4YW1wbGUvaXNzdWVycy81NjUwNDkiLCJ2YWxpZEZyb20iOiIyMDEwLTAxLTAxVDE5OjIzOjI0WiIsImNyZWRlbnRpYWxTY2hlbWEiOnsiX3NkIjpbIkU3dU1sSWFyS29iYXJTdEZGRjctZm5qaV9sQVdnM3BGMkV5dVc4dWFYakUiLCJYelRaSVgyNGdDSWxSQVFHclFoNU5FRm1XWkQtZ3Z3dkIybzB5Y0FwNFZzIl19LCJjcmVkZW50aWFsU3ViamVjdCI6eyJkZWdyZWUiOnsibmFtZSI6IkJhY2hlbG9yIG9mIFNjaWVuY2UgYW5kIEFydHMiLCJfc2QiOlsiT3oxUEZIMG0tWk9TdEhwUVZyeGlmVlpKRzhvNmlQQmNnLVZ2SXQwd2plcyJdfSwiX3NkIjpbIkVZQ1daMTZZMHB5X1VNNzRHU3NVYU9zT19mdDExTlVSaFFUTS1TT1lFTVEiXX0sIl9zZCI6WyJqT055NnZUbGNvVlAzM25oSTdERGN3ekVka3d2R3VVRXlLUjdrWEVLd3VVIiwid21BdHpwc0dRbDJveS1PY2JrSEVZcE8xb3BoX3VYcWVWVTRKekF0aFFibyJdLCJfc2RfYWxnIjoic2hhLTI1NiIsImlzcyI6Imh0dHBzOi8vdW5pdmVyc2l0eS5leGFtcGxlL2lzc3VlcnMvNTY1MDQ5IiwiaWF0IjoxNjk3Mjg5OTk2LCJleHAiOjE3Mjg5MTIzOTYsImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJjcnYiOiJQLTM4NCIsImFsZyI6IkVTMzg0IiwieCI6InZFdV84WGxZT0ZFU2hTcVRpZ2JSYWduZ0ZGM1p5U0xrclNHekh3azFBT1loanhlazVhV21HY2UwZU05S0pWOEIiLCJ5IjoiRUpNY2czWXBzUTB3M2RLNHlVa25QczE1Z0lsY2Yyay03dzFKLTNlYlBiOERENmQtUkhBeGUwMDkzSWpfdTRCOSJ9fX0.rYzbxb6j1dwop8_s491iArVVJNm6A6C3b742gOm_qYO3zdkyQU4_VxxOSJ8ECcmWj2r5KyiCNC1ojfO4Yms-zBsjt7PoMYpYWBplsqXpiIvnehmM7D0eOLi40uHXki0X~WyJSWTg1YTZNMmEwX3VDWlFTVGZmTFdRIiwgImlkIiwgImh0dHA6Ly91bml2ZXJzaXR5LmV4YW1wbGUvY3JlZGVudGlhbHMvMTg3MiJd~WyJMeG5GYTBXVm8wRUluVy1QdS1fd1dRIiwgInR5cGUiLCBbIlZlcmlmaWFibGVDcmVkZW50aWFsIiwgIkV4YW1wbGVBbHVtbmlDcmVkZW50aWFsIl1d~WyJUQVdrakpCaVpxdC1rVU54X1EweUJBIiwgImlkIiwgImh0dHBzOi8vZXhhbXBsZS5vcmcvZXhhbXBsZXMvZGVncmVlLmpzb24iXQ~WyJTd2xuZFpPZzZEZ1ZERFp5X0RvYVFBIiwgInR5cGUiLCAiSnNvblNjaGVtYSJd~WyJuSnJlU3E1Nzg3RGZMSDJCbU03cXFRIiwgImlkIiwgImRpZDpleGFtcGxlOjEyMyJd~WyIxMjNNd3hNcHRiek02YUk2aW03ME1RIiwgInR5cGUiLCAiQmFjaGVsb3JEZWdyZWUiXQ
-data:application/vp+ld+json+sd-jwt;eyJhbGciOiJFUzM4NCIsImtpZCI6IlNJM1JITm91aDhvODFOT09OUFFVQUw3RWdaLWtJNl94ajlvUkV2WDF4T3ciLCJ0eXAiOiJ2YytsZCtqc29uK3NkLWp3dCIsImN0eSI6InZjK2xkK2pzb24ifQ.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.rYzbxb6j1dwop8_s491iArVVJNm6A6C3b742gOm_qYO3zdkyQU4_VxxOSJ8ECcmWj2r5KyiCNC1ojfO4Yms-zBsjt7PoMYpYWBplsqXpiIvnehmM7D0eOLi40uHXki0X~WyJTd2xuZFpPZzZEZ1ZERFp5X0RvYVFBIiwgInR5cGUiLCAiSnNvblNjaGVtYSJd~WyIxMjNNd3hNcHRiek02YUk2aW03ME1RIiwgInR5cGUiLCAiQmFjaGVsb3JEZWdyZWUiXQ~WyJMeG5GYTBXVm8wRUluVy1QdS1fd1dRIiwgInR5cGUiLCBbIlZlcmlmaWFibGVDcmVkZW50aWFsIiwgIkV4YW1wbGVBbHVtbmlDcmVkZW50aWFsIl1d~WyJSWTg1YTZNMmEwX3VDWlFTVGZmTFdRIiwgImlkIiwgImh0dHA6Ly91bml2ZXJzaXR5LmV4YW1wbGUvY3JlZGVudGlhbHMvMTg3MiJd~eyJhbGciOiJFUzM4NCIsInR5cCI6ImtiK2p3dCJ9.eyJub25jZSI6IkVmeTROTFJPX3ZvSkszdDIzcUNfQlEiLCJhdWQiOiJodHRwczovL3ZlcmlmaWVyLmV4YW1wbGUiLCJpYXQiOjE2OTcyODk5OTZ9.6G-1nVcrDKFzR6BdbcFHcbtassEb8NZ7ZavTYz3SJ-e4pXleXs0tNcCkUCwMI70gsuOY0AXzeDPbHjp5GKyLDVuNWgWCt3Wo2VSaCwUkyfLyvhkCsmkF9kvFhMIOhp1i
+data:application/vp-ld+sd-jwt;eyJhbGciOiJFUzM4NCIsImtpZCI6IlNJM1JITm91aDhvODFOT09OUFFVQUw3RWdaLWtJNl94ajlvUkV2WDF4T3ciLCJ0eXAiOiJ2YytsZCtqc29uK3NkLWp3dCIsImN0eSI6InZjK2xkK2pzb24ifQ.eyJAY29udGV4dCI6WyJodHRwczovL3d3dy53My5vcmcvbnMvY3JlZGVudGlhbHMvdjIiLCJodHRwczovL3d3dy53My5vcmcvbnMvY3JlZGVudGlhbHMvZXhhbXBsZXMvdjIiXSwiaXNzdWVyIjoiaHR0cHM6Ly91bml2ZXJzaXR5LmV4YW1wbGUvaXNzdWVycy81NjUwNDkiLCJ2YWxpZEZyb20iOiIyMDEwLTAxLTAxVDE5OjIzOjI0WiIsImNyZWRlbnRpYWxTY2hlbWEiOnsiX3NkIjpbIkU3dU1sSWFyS29iYXJTdEZGRjctZm5qaV9sQVdnM3BGMkV5dVc4dWFYakUiLCJYelRaSVgyNGdDSWxSQVFHclFoNU5FRm1XWkQtZ3Z3dkIybzB5Y0FwNFZzIl19LCJjcmVkZW50aWFsU3ViamVjdCI6eyJkZWdyZWUiOnsibmFtZSI6IkJhY2hlbG9yIG9mIFNjaWVuY2UgYW5kIEFydHMiLCJfc2QiOlsiT3oxUEZIMG0tWk9TdEhwUVZyeGlmVlpKRzhvNmlQQmNnLVZ2SXQwd2plcyJdfSwiX3NkIjpbIkVZQ1daMTZZMHB5X1VNNzRHU3NVYU9zT19mdDExTlVSaFFUTS1TT1lFTVEiXX0sIl9zZCI6WyJqT055NnZUbGNvVlAzM25oSTdERGN3ekVka3d2R3VVRXlLUjdrWEVLd3VVIiwid21BdHpwc0dRbDJveS1PY2JrSEVZcE8xb3BoX3VYcWVWVTRKekF0aFFibyJdLCJfc2RfYWxnIjoic2hhLTI1NiIsImlzcyI6Imh0dHBzOi8vdW5pdmVyc2l0eS5leGFtcGxlL2lzc3VlcnMvNTY1MDQ5IiwiaWF0IjoxNjk3Mjg5OTk2LCJleHAiOjE3Mjg5MTIzOTYsImNuZiI6eyJqd2siOnsia3R5IjoiRUMiLCJjcnYiOiJQLTM4NCIsImFsZyI6IkVTMzg0IiwieCI6InZFdV84WGxZT0ZFU2hTcVRpZ2JSYWduZ0ZGM1p5U0xrclNHekh3azFBT1loanhlazVhV21HY2UwZU05S0pWOEIiLCJ5IjoiRUpNY2czWXBzUTB3M2RLNHlVa25QczE1Z0lsY2Yyay03dzFKLTNlYlBiOERENmQtUkhBeGUwMDkzSWpfdTRCOSJ9fX0.rYzbxb6j1dwop8_s491iArVVJNm6A6C3b742gOm_qYO3zdkyQU4_VxxOSJ8ECcmWj2r5KyiCNC1ojfO4Yms-zBsjt7PoMYpYWBplsqXpiIvnehmM7D0eOLi40uHXki0X~WyJTd2xuZFpPZzZEZ1ZERFp5X0RvYVFBIiwgInR5cGUiLCAiSnNvblNjaGVtYSJd~WyIxMjNNd3hNcHRiek02YUk2aW03ME1RIiwgInR5cGUiLCAiQmFjaGVsb3JEZWdyZWUiXQ~WyJMeG5GYTBXVm8wRUluVy1QdS1fd1dRIiwgInR5cGUiLCBbIlZlcmlmaWFibGVDcmVkZW50aWFsIiwgIkV4YW1wbGVBbHVtbmlDcmVkZW50aWFsIl1d~WyJSWTg1YTZNMmEwX3VDWlFTVGZmTFdRIiwgImlkIiwgImh0dHA6Ly91bml2ZXJzaXR5LmV4YW1wbGUvY3JlZGVudGlhbHMvMTg3MiJd~eyJhbGciOiJFUzM4NCIsInR5cCI6ImtiK2p3dCJ9.eyJub25jZSI6IkVmeTROTFJPX3ZvSkszdDIzcUNfQlEiLCJhdWQiOiJodHRwczovL3ZlcmlmaWVyLmV4YW1wbGUiLCJpYXQiOjE2OTcyODk5OTZ9.6G-1nVcrDKFzR6BdbcFHcbtassEb8NZ7ZavTYz3SJ-e4pXleXs0tNcCkUCwMI70gsuOY0AXzeDPbHjp5GKyLDVuNWgWCt3Wo2VSaCwUkyfLyvhkCsmkF9kvFhMIOhp1i
COSE Examples
{ / Protected /
1: -35, / Algorithm /
- 3: application/vc+ld+json, / Content type /
+ 3: application/vc, / Content type /
4: h'177f12cb...1933d554', / Key identifier /
15: { / CWT Claims /
1: urn:example:123, / Issuer /
@@ -2453,7 +2118,7 @@
COSE Examples
{ / Protected /
1: -35, / Algorithm /
- 3: application/vp+ld+json, / Content type /
+ 3: application/vp, / Content type /
4: h'177f12cb...1933d554', / Key identifier /
15: { / CWT Claims /
1: urn:example:123, / Issuer /
@@ -2517,7 +2182,7 @@
Verification Algorithms
document
: a document conforming to the [[[VC-DATA-MODEL-2.0]]] [[VC-DATA-MODEL-2.0]]
mediaType
: vc+ld+json
or vp+ld+json
+ mediaType
: vc
or vp
Algorithm for Verifying a Credential or Presentation Secured w
inputMediaType
: vc+ld+json+jwt
or
- vp+ld+json+jwt
+ inputMediaType
: vc-ld+jwt
or
+ vp-ld+jwt
inputDocument
: the verifiable credential secured as a JWT [[RFC7519]]
@@ -2549,7 +2214,7 @@ Algorithm for Verifying a Credential or Presentation Secured w
Set
status
to true
mediaType
to vc+ld+json
or vp+json+ld
+ Set mediaType
to vc
or vp
document
to the decoded JWS payload.
@@ -2585,7 +2250,7 @@ Algorithm for Verifying a Credential or Presentation Secured
inputMediaType
: vc+ld+json+sd-jwt
+ inputMediaType
: vc-ld+sd-jwt
inputDocument
: the verifiable credential secured with [[SD-JWT]]
@@ -2607,7 +2272,7 @@ Algorithm for Verifying a Credential or Presentation Secured
Set
status
to true
mediaType
to vc+ld+json
+ Set mediaType
to vc
Algorithm for Verifying a Credential or Presentation Secured w
inputMediaType
: vc+ld+json+cose
or
- vp+ld+json+cose
+ inputMediaType
: vc-ld+cose
or
+ vp-ld+cose
inputDocument
: the verifiable credential or verifiable presentation
@@ -2670,7 +2335,7 @@ Algorithm for Verifying a Credential or Presentation Secured w
Set
status
to true
mediaType
to vc+ld+json
or vp+ld+json
+ Set mediaType
to vc
or vp
document
to the decoded COSE_Sign1 payload.