Skip to content

feat: add NFC Issuer Service documentation#69

Open
andreyudentsovottofeller wants to merge 6 commits intomainfrom
feat/nfc-credential-and-refresh-docs
Open

feat: add NFC Issuer Service documentation#69
andreyudentsovottofeller wants to merge 6 commits intomainfrom
feat/nfc-credential-and-refresh-docs

Conversation

@andreyudentsovottofeller
Copy link

@andreyudentsovottofeller andreyudentsovottofeller commented Mar 11, 2026


{ /* TODO: Add details on the PCP */ }

### Associated Data Commitment
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@NnnOooPppEee @RyanCao7 @andreyudentsovottofeller can you please double check this?

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@paolodamico What do you think about changing:
For ICAO-9303 documents, the message digest of the EF.SOD signature is used.
to
For ICAO-9303 documents, the messageDigest attribute from the EF.SOD is used.


### Claim 0 - Authentication Claim

Identifies the type of authentication performed when enrolling a document. This helps determine the state of the document at enrollment type. For example, documents that only undergo Passive Authentication have no guarantee that the data isn't cloned from an original document. Please note that not all authentications are supported for all documents, and it usually varies per country. The strongest authentication available is always selected.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could it be enrollment time?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

100%, feel free to update directly

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated.


### Claim 1 - SOD Signature

Contains essentially the document's signature from the issuing authority. For passports and other ICAO-9303 compliant documents this is retrieved from the `EF.SOD` (Security Object Document) group, which contains `SignedData.SignerInfos[0].Signature` (see [Section 4.6.2.1 from ICAO-9303 Part 10](https://www.icao.int/sites/default/files/publications/DocSeries/9303_p10_cons_en.pdf)). Please note that this claim is not set for credentials from My Number Cards.
Copy link
Author

@andreyudentsovottofeller andreyudentsovottofeller Mar 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@paolodamico Should we mention that we store field element with modulo reduction of blake3(SOD signature)?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes, great call!

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated.


{ /* TODO: Add details on the PCP */ }

### Associated Data Commitment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@paolodamico What do you think about changing:
For ICAO-9303 documents, the message digest of the EF.SOD signature is used.
to
For ICAO-9303 documents, the messageDigest attribute from the EF.SOD is used.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants