[Openid-specs-digital-credentials-protocols] Report on Model and Security Properties OID4VP+DC API

[Joseph Heenan]

Dear WG members

We’ve received the first deliverable towards completing a formal analysis of the latest OpenID for Verifiable Presentations specification, in particular the properties of the specification when used over the new w3c Digital Credentials API.

The scope is this deliverable is:

"(A) Model and Security Properties: Adapt and extend the existing formal model of the OID4VP
protocol as described above, in particular, including DC API, using a draft of the OID4VP and DC API
specifications as provided by the OIDF or a party designated by the OIDF. Furthermore, identify and
formalize authentication security properties and necessary assumptions in alignment with the OIDF’s (or
any party designated by the OIDF) requirements. Throughout, we welcome collaboration with designated
points of contact, including the responsible working groups within the OIDF (e.g. the Digital Credentials
Protocols WG https://openid.net/wg/digital-credentials-protocols/)."


The PDF of the report is attached. At the next working group meeting we will ask the group to “accept” this deliverable.


The two issues identified have been opened in GitHub (and the first one already has a PR):

https://github.com/openid/OpenID4VP/issues/542

https://github.com/openid/OpenID4VP/issues/541

Many thanks

Joseph




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20250414/4b84c5d0/attachment-0002.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Report-Model-Sec-Prop-OID4VP-DC.pdf
Type: application/pdf
Size: 1053357 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20250414/4b84c5d0/attachment-0001.pdf>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-digital-credentials-protocols/attachments/20250414/4b84c5d0/attachment-0003.htm>