openid / openid/OpenID4VCI

How does an issuer decide which alg from`credential_signing_alg_values_supported` to use

Open
#284 7 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

issuer-metadata
Dominant language
No language data
Stars
125
Forks
41
PR merge metrics
No merged PRs in 30d

Description

If we publish Issuer Metadata that contains a credential configuration with the following:

"credential_signing_alg_values_supported": [
                "ES256", "ES256K", "RS256"
            ]

how do we know which signature alg to use when signing the credential for a particular wallet?

Is there a mechanism where the wallet chooses one of the supported values that I am missing in the spec, or is this out of scope and should be handled on some other level?

Thank you

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Issuer Metadata credential configuration and the credential_signing_alg_values_supported field described in the issue. Read the surrounding specification text and comment discussion to determine whether the wallet selects an algorithm or the issuer does. Done means the specification clearly documents the selection mechanism or states that it is out of scope.

Written by the indexing model from the issue text.

Assessment

Domain
authentication
Issue type
Documentation
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.