Skip to content

Support wallet instance attestation standard format (WIA) #3484

Description

@ThierryThevenet

The wallet attestation is no more signed with a DID but with a key provided in a X509 inside the attestation itself.
The key is in the x5c attribute of the jwt header.

There maybe several x509 certificates, as the first one is the leaf and others are intermediary.

NB : there is 1 exp for the WIA and one exp for the status listof the WIA

below a wallet attestation jwt

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.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.pk9APJV6Yibpw6pUj46ExsdoAzFfb4ejjEJY-yZEpFpN50vV0-93JeSi5g6ISR7DWTeJD2M2nk3xTmz5Rt9PVQ

Eventually read the doc https://github.com/eu-digital-identity-wallet/eudi-doc-standards-and-technical-specifications/blob/main/docs/technical-specifications/ts3-wallet-unit-attestation.md

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions