silverpill on Nostr: Important information for FEP-8b32 and FEP-c390 implementers: It was reported that ...
Important information for FEP-8b32 and FEP-c390 implementers:
https://github.com/w3c/vc-data-integrity/issues/231It was reported that context injection is a necessary step for eddsa-jcs-2022 cryptosuite. It is necessary even if secured object is nested inside an object with @context property (as in FEP-c390).
This means FEP-c390 feature file is wrong, because I assumed that context injection is not needed. What's worse, it is not even clear how context injection must be done in this case (should we inject a string, or an array?).
In cases where top-level object is being signed, the context injection is not needed, so existing FEP-8b32 implementations are probably correct.
Published at
2023-12-21 19:36:21Event JSON
{
"id": "9598476e2cdacf4f9d247da149878ae7221fa600b4cbca442259c830849cd200",
"pubkey": "6a5f35dc281276c30c527e1240ef6bad3ef27bcf92b4fef017dc7f5a5c31e5ec",
"created_at": 1703187381,
"kind": 1,
"tags": [
[
"proxy",
"https://mitra.social/objects/018c8de0-fea2-b5a2-a588-5f454ba74995",
"activitypub"
]
],
"content": "Important information for FEP-8b32 and FEP-c390 implementers:\nhttps://github.com/w3c/vc-data-integrity/issues/231\n\nIt was reported that context injection is a necessary step for eddsa-jcs-2022 cryptosuite. It is necessary even if secured object is nested inside an object with @context property (as in FEP-c390).\n\nThis means FEP-c390 feature file is wrong, because I assumed that context injection is not needed. What's worse, it is not even clear how context injection must be done in this case (should we inject a string, or an array?).\n\nIn cases where top-level object is being signed, the context injection is not needed, so existing FEP-8b32 implementations are probably correct.",
"sig": "9aa4435d4d058470453bd03b792b53c3521f64a01b1f4e03d2cc82f6d59c27f46affa2eb268450d6cefd81d03d7601dd3762b06fe3e55f95fdd1d5ac35ad42e7"
}