Skip to content

Commit 3c26cfa

Browse files
authored
Merge branch 'main' into haip-hpke
2 parents d5fb325 + 8a3f6fd commit 3c26cfa

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

‎1.0/openid4vc-high-assurance-interoperability-profile-1_0.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -258,7 +258,7 @@ The following requirements apply to OpenID for Verifiable Presentations, irrespe
258258
* The Wallet and Verifier MUST support at least one of the following Credential Format Profiles defined in (#vc-profiles): IETF SD-JWT VC or ISO mdoc. Ecosystems SHOULD clearly indicate which of these formats, IETF SD-JWT VC, ISO mdoc, or both, are required to be supported.
259259
* The Response type MUST be `vp_token`.
260260
* For signed requests, the Verifier MUST use, and the Wallet MUST accept the Client Identifier Prefix `x509_hash` as defined in Section 5.9.3 of [@!OIDF.OID4VP]. The X.509 certificate of the trust anchor MUST NOT be included in the `x5c` JOSE header of the signed request. The X.509 certificate signing the request MUST NOT be self-signed. X.509 certificate profiles to be used with `x509_hash` are out of scope of this specification.
261-
* The DCQL query and response MUST be used as defined in Section 6 of [@!OIDF.OID4VP].
261+
* The `dcql_query` parameter MUST be used as defined in Section 5.1 of [@!OIDF.OID4VP].
262262
* Response encryption MUST be performed as specified in [@!OIDF.OID4VP, section 8.3]. The JWE `alg` (algorithm) header parameter (see [@!RFC7516, section 4.1.1])
263263
value `ECDH-ES` (as defined in [@!RFC7518, section 4.6]), with key agreement utilizing keys on the `P-256` curve (see [@!RFC7518, section 6.2.1.1]) MUST be supported.
264264
The JWE `enc` (encryption algorithm) header parameter (see [@!RFC7516, section 4.1.2]) values `A128GCM` and `A256GCM` (as defined in [@!RFC7518, section 5.3]) MUST be supported by Verifiers. Wallets MUST support `A128GCM` or `A256GCM`, or both. If both are supported, the Wallet SHOULD use `A256GCM` for the JWE `enc`. Verifiers MUST list both `A128GCM` and `A256GCM` in `encrypted_response_enc_values_supported` in their client metadata.
@@ -733,7 +733,7 @@ The technology described in this specification was made available from contribut
733733

734734
-09
735735

736-
* TBD
736+
* Clarify DCQL query is `dcql_query` parameter
737737

738738
-final
739739

‎1.1/openid4vc-high-assurance-interoperability-profile-1_1.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -254,7 +254,7 @@ The following requirements apply to OpenID for Verifiable Presentations, irrespe
254254
* The Wallet and Verifier MUST support at least one of the following Credential Format Profiles defined in (#vc-profiles): IETF SD-JWT VC or ISO mdoc. Ecosystems SHOULD clearly indicate which of these formats, IETF SD-JWT VC, ISO mdoc, or both, are required to be supported.
255255
* The Response type MUST be `vp_token`.
256256
* For signed requests, the Verifier MUST use, and the Wallet MUST accept the Client Identifier Prefix `x509_hash` as defined in Section 5.9.3 of [@!OIDF.OID4VP]. The X.509 certificate of the trust anchor MUST NOT be included in the `x5c` JOSE header of the signed request. The X.509 certificate signing the request MUST NOT be self-signed. X.509 certificate profiles to be used with `x509_hash` are out of scope of this specification.
257-
* The DCQL query and response MUST be used as defined in Section 6 of [@!OIDF.OID4VP].
257+
* The `dcql_query` parameter MUST be used as defined in Section 5.1 of [@!OIDF.OID4VP].
258258
* Verifiers MUST supply ephemeral encryption public keys specific to each Authorization Request passed via client metadata as specified in Section 8.3 of [@!OIDF.OID4VP].
259259
* The Authority Key Identifier (`aki`)-based Trusted Authority Query (`trusted_authorities`) for DCQL, as defined in section 6.1.1.1 of [@!OIDF.OID4VP], MUST be supported. Note that the Authority Key Identifiers mechanism can be used to support multiple X.509-based trust mechanisms, such as ISO mDL VICAL (as introduced in [@ISO.18013-5]) or ETSI Trusted Lists [@ETSI.TL]. This is achieved by collecting the relevant X.509 certificates for the trusted Issuers and including the encoded Key Identifiers from the certificates in the `aki` array .
260260

@@ -751,4 +751,4 @@ The technology described in this specification was made available from contribut
751751

752752
-01
753753

754-
* TBD
754+
* Clarify DCQL query is `dcql_query` parameter

0 commit comments

Comments
 (0)