[Openid-specs-ab] Slides - Early Formal Analysis OID4VP over BLE

[ANTHONY J NADALIN]

Would this be ok to share with SC17 WG4 and WG10 since we have mdoc over ble and we have mdoc over OIDC4VP and this would be great to compare the 2 protocols

Get Outlook for Android<https://aka.ms/AAb9ysg>
________________________________
From: Openid-specs-ab <openid-specs-ab-bounces at lists.openid.net> on behalf of Linker Felix via Openid-specs-ab <openid-specs-ab at lists.openid.net>
Sent: Wednesday, July 26, 2023 4:11:06 PM
To: Tom Jones <thomasclinganjones at gmail.com>; Artifact Binding/Connect Working Group <openid-specs-ab at lists.openid.net>
Cc: Linker Felix <flinker at inf.ethz.ch>
Subject: Re: [Openid-specs-ab] Slides - Early Formal Analysis OID4VP over BLE


Hi Tom,



TLS? I presume you mean the BLE transport layer shared key. I feared that this might be inaccessible, but thought it could be as at least one halve of the verifier’s public key is rendered as a QR code (reference<https://openid.bitbucket.io/connect/openid-4-verifiable-presentations-over-ble-1_0.html#name-qr-code>).



Best,

Felix



From: Tom Jones <thomasclinganjones at gmail.com>
Sent: Tuesday, July 25, 2023 10:24 PM
To: Artifact Binding/Connect Working Group <openid-specs-ab at lists.openid.net>
Cc: Linker Felix <flinker at inf.ethz.ch>
Subject: Re: [Openid-specs-ab] Slides - Early Formal Analysis OID4VP over BLE



if this is about the tls shared key, then that is not available in all operating systems or in all data center deployments.

Be the change you want to see in the world ..tom





On Tue, Jul 25, 2023 at 8:16 AM Linker Felix via Openid-specs-ab <openid-specs-ab at lists.openid.net<mailto:openid-specs-ab at lists.openid.net>> wrote:

Hi all,



In last week’s call, I presented the results of my early formal analysis of the “OpenID for Verifiable Presentations over BLE” standard. As requested during the call, find my slides attached.



I will soon start opening issues describing my findings and recommendations in more detail.



Please ask me any questions about my methodology and analysis. I love talking about Tamarin (the tool that I used to analyze the standard)!



Thanks, and best,

Felix

_______________________________________________
Openid-specs-ab mailing list
Openid-specs-ab at lists.openid.net<mailto:Openid-specs-ab at lists.openid.net>
https://lists.openid.net/mailman/listinfo/openid-specs-ab
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20230726/069ab155/attachment-0001.html>