Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to deterministically match the transaction_data_hashes to the transaction_data? #442

Open
TimoGlastra opened this issue Mar 4, 2025 · 0 comments

Comments

@TimoGlastra
Copy link
Member

TimoGlastra commented Mar 4, 2025

OID4VP allows to include an array of transaction_data entries, where each entry can specify an array of credential_ids that are allowed to include the transaction data hash. Also an array of hash algorithms can be configured.

Let's say we have a request:

  • requesting three credentials, credential A, credential B, credential C
  • requesting two transaction hashes to be signed over, the first can be signed over by credential A & B, the second by credential B & C.
  • They allow sha-256 and sha-512.

How would i know which of the hashes in the response match to which of the transaction_data entries from the response? We can't match the indexes as not all credentials sign over all hashes. We also can't pre-compute the hashes as there's multiple hashing methods possible (or we would have to pre-compute all possible hash values for all possible hash algorithms?).

Edit: see #443 for possible solution

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant