Skip to content

Commit da30fa3

Browse files
authored
Topic p final paper and version update topic q and r (#1535) (#616)
1 parent cff01f2 commit da30fa3

File tree

4 files changed

+23
-6
lines changed

4 files changed

+23
-6
lines changed

CHANGELOG.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,8 @@ and this project adheres to [Semantic Versioning](https://semverdoc.org/).
77

88
## [2.6.0] - 2025-10-13
99

10-
- The [Discussion Paper for Topic O](./discussion-topics/o-catalogues-for-attestations.md) was integrated into [Section 5.5](#55-catalogue-of-attributes-and-catalogue-of-attestation-schemes), and into [Topic 25](./annexes/annex-2/annex-2-high-level-requirements.md#a2325-topic-25---unified-definition-and-controlled-vocabularies-for-attributes-catalogue-of-attributes) and [Topic 26](./annexes/annex-2/annex-2-high-level-requirements.md#a2326-topic-26---catalogue-of-attestation-schemes) in Annex 2.
11-
- The [Discussion Paper for Topic Z](./discussion-topics/z-device-bound-attestations.md) was integrated into [Sections 6.6.2.3.3](#66233-verifies-that-pid-key-or-device-bound-attestation-key-is-protected-by-the-wscd) and [6.6.3.8](#6638-relying-party-instance-verifies-device-binding), among others. Moreover, multiple requirements in Annex 2 where changed or slightly adapted to account for the fact that device binding is now recommended, not mandatory.
10+
- The Discussion Paper for Topic O, and into Topic 25 and Topic 26 in Annex 2.
11+
- The Discussion Paper for Topic Z was integrated into Sections 6.6.2.3.3 and 6.6.3.8, among others. Moreover, multiple requirements in Annex 2 where changed or slightly adapted to account for the fact that device binding is now recommended, not mandatory.
1212

1313
- Apart from these changes, a limited number of editorial mistakes were corrected.
1414

docs/discussion-topics/p-secure-cryptographic-interface-between-the-Wallet-Instance-and-WSCA.md

Lines changed: 18 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Topic P - Secure Cryptographic Interface between the Wallet Instance and WSCA
22

3-
Version 0.4, updated 23 Sep. 2025
3+
Version 1.0, updated 14 Oct. 2025
44

55
[Link to GitHub discussion](https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/discussions/578)
66

@@ -131,7 +131,24 @@ generated cryptographic keys and sensitive data [WIAM_13, WIAM_21, PAD_04, PAD_0
131131
private key [WIAM_19].
132132

133133

134+
134135
## 3. Existing technologies
136+
This section presents a number of technologies that potentially can be used to
137+
implement a WSCA. It is important to clarify that the ARF does not endorse any
138+
specific technology. The Wallet Provider must ensure that its implementation of
139+
the WSCA and WSCD in combination can be certified for security. Moreover, it is
140+
possible that the Wallet Provider may need to develop some bespoke components to
141+
be able to fulfill all requirements for a WSCA in the ARF and the CIRs. For
142+
example, if the WSCD is a smart card, the Wallet Provider may develop a
143+
dedicated JavaCard applet that runs on the WSCD and augments the native OS of
144+
the smart card with additional functionalities. If so, the security of this
145+
JavaCard applet needs to be considered during certification of the Wallet
146+
Solution, whereas the OS of the WSCD itself (which is not provided by the Wallet
147+
Provider) may be covered under an assumption regarding its resistance against
148+
attackers with high attack potential, in accordance with CIR 2024/2981, Annex
149+
IV, paragraph 3(3). Furthermore, in accordance with CIR 2024/2981 "every
150+
architecture and implementation of wallets" shall properly address the security
151+
and privacy risks set in Annex I of CIR 2024/2981.
135152

136153
In mobile devices, the Wallet Secure Cryptographic Device (WSCD) is often embedded within
137154
the device hardware. The WSCA, in this case is platform-dependent and acts as the interface

docs/discussion-topics/q-interface-user-wallet-instance.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11

2-
Version 0.4, updated 22 September 2025
2+
Version 1.0, date 14 October 2025
33

44
[Link to GitHub discussion](https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/discussions/586)
55

docs/discussion-topics/r-authentication-of-user-to-device.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
1-
Version 0.9.1, updated 24 September 2025
1+
Version 1.0, date 14 October 2025
22

33
[Link to GitHub discussion](https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework/discussions/585)
44

5-
# R - Authentication of the User to the device
5+
# Topic R - Authentication of the User to the device
66

77
## 1 Introduction
88

0 commit comments

Comments
 (0)