generated from tkuhrt/os-template
-
Notifications
You must be signed in to change notification settings - Fork 14
Closed
Description
SD-JWT defines the sd_hash
claim in the KB-JWT as:
The hash value in the sd_hash claim binds the KB-JWT to the specific
SD-JWT. The sd_hash value MUST be taken over the US-ASCII bytes of
the encoded SD-JWT, i.e., the Issuer-signed JWT, a tilde character,
and zero or more Disclosures selected for presentation to the
Verifier, each followed by a tilde character:
<Issuer-signed JWT>~<Disclosure 1>~<Disclosure 2>~...~<Disclosure N>~
The last tilde is missing in the implementation in this repository (e.g., here https://github.com/openwallet-foundation-labs/sd-jwt-rust/blob/main/src/verifier.rs#L200-L218) resulting in invalid sd_hash values.
Metadata
Metadata
Assignees
Labels
No labels