Skip to content

Verification failure for SD-JWT+KB when the signing algorithm of the Key Binding is different from the signing algorithm of SD-JWT #33

@akarabashov

Description

@akarabashov

Summary:
When verifying an SD-JWT+KB presentation, the verification process fails with a DeserializationError("InvalidAlgorithm") if the Key Binding signing algorithm is different from the SD-JWT signing algorithm.

Steps to Reproduce:

  1. Issue an SD-JWT including a Holder’s EdDSA key, where the issuer signs the SD-JWT using the ES256 algorithm.
  2. Create a presentation that includes a Key Binding signed using the Holder’s EdDSA key.
  3. Attempt to verify the presentation.

Expected result: The presentation should be successfully verified, even if the Key Binding signing algorithm EdDSA differs from the SD-JWT signing algorithm ES256.

Actual Result: The verification process fails, resulting in a DeserializationError("InvalidAlgorithm").

Note: Issue, create presentation and verify executed using SD-JWT-Rust

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions