- From: Nate Otto <nate@ottonomy.net>
- Date: Thu, 5 Feb 2015 00:45:32 -0800
- To: Credentials Community Group <public-credentials@w3.org>
- Message-ID: <CAPk0ugnTXZ23Ov+Fmh44Hpja_c56JG6mp2GsGKQ7VBOvornmLg@mail.gmail.com>
Open Creds,
Either:
1. I've got poor reading comprehension that has prevented me from
understanding this for months,
2. I'm completely wrong now,
or 3. Does the signed JSON-LD technique we've been discussing ('Secure
Messaging' <http://manu.sporny.org/2013/sm-vs-jose/>) allow (or is very
close to allowing) multiple signatures on LD input without changing the
expanded JSON-LD of the signed-output-minus-signature? This is interesting
because that signed-output-minus-signature is the input to the
signature-verification function, right? At least the first step of that
algorithm is removing the signature property.
Here's an example of some signed JSON-LD:
"value": {
"@context": "https://w3id.org/identity/v1",
"id": "http://ssa.us.gov/credential/8273",
"type": "PassportCredential",
"claim": {
"id": "https://example.org/identities/alice",
"name": "Alice Smith",
"birthdate": "1988-11-02",
"governmentId": "321-54-9876"
},
"expires": "2017-02-04",
"signature": {
"type": "GraphSignature2012",
"creator": "https://ssa.us.gov/keys/27",
"signature": "r+e90REDpW....bAsNUtvQM"
}
}
And with multiple signatures, the "signature" property just turns into an
array of multiple values, just as it would turn into a 1-item array when
JSON-LD expanded anyway:
"value": {
"@context": "https://w3id.org/identity/v1",
"id": "http://ssa.us.gov/credential/8273",
"type": "PassportCredential",
"claim": {
"id": "https://example.org/identities/alice",
"name": "Alice Smith",
"birthdate": "1988-11-02",
"governmentId": "321-54-9876"
},
"expires": "2017-02-04",
*"signature": [{
"type": "GraphSignature2012",
"creator": "https://ssa.us.gov/keys/27 <https://ssa.us.gov/keys/27>",
"signature": "r+e90REDpW....bAsNUtvQM"
},*
* {*
* "type": "GraphSignature2012",
"creator": "https://example.org/keys/1 <https://example.org/keys/1>",
"signature": "r+eeeeeeee....aaaaBBBBB"
** }]*}
Thanks for your indulgence,
*Nate Otto, Developer*
concentricsky.com
Received on Thursday, 5 February 2015 08:46:00 UTC