decentralized-identity / decentralized-identity/didwebvh

Add PQC support for the auth proofs

Open
#280 2 comments 0 reactions 0 assignees View on GitHub
Next Version
Dominant language
HTML
Stars
54
Forks
17
Avg merge
13d 3h
Merged PRs (30d)
1

Description

v1 of did:webvh requires that auth and witness proofs use eddsa keys. For the next version, suggest that we allow the use of both eddsa keys and PQC ML-DSA 44 keys. The use of multikey, did:key will ensure that a verifier can determine the type of key being used (plus, there is the size of the key...). As well, the use of Data Integrity proofs mean the code changes are minimal -- once the DI Proof cryptosuite for ML-DSA is official.

From my understanding, NIST considers ML-DSA 44 to be the PQC "replacement" for EDDSA use cases.

Experiments have been run using ML-DSA 44 keys with did:webvh, and the high level overview is that the file size is about 10x over EDDSA, and the processing time is about 10x slower vs. EDDSA. Not bad!

We will have to make sure that we can find production ready implementations of ML-DSA 44. The ones identified so far have "not for production" warnings.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.