Skip to content

Define usage of HPKE and info structure to be used.#703

Open
GarethCOliver wants to merge 2 commits intomainfrom
gco-hpke
Open

Define usage of HPKE and info structure to be used.#703
GarethCOliver wants to merge 2 commits intomainfrom
gco-hpke

Conversation

@GarethCOliver
Copy link
Contributor

Resolve #692

This specifies how to user JOSE HPKE in OpenId4VP by defining a 'session_info' structure to be included in the info parameter.

It uses a byte structure, following the pattern JOSE HPKE uses for the recipient structure.

Open Questions:

  • Should jwk hash be included (currently yes for parity with session transcript)
  • Should the structure be hashed, as is done with session transcript (currently no).

@GarethCOliver GarethCOliver requested review from awoie, bc-pi, c2bo, jogu and martijnharing and removed request for awoie March 3, 2026 18:35
@Sakurann
Copy link
Collaborator

Sakurann commented Mar 5, 2026

WG discussion in #692 (comment) said no to jwkthumbprint and yes to hash. However, after a discussion in the WG, given the changes in the jose-hpke specification, we have a choice as a wg and there is a preference not to hash, but want to check first if widely used libraries restrict the length or not. we will come back to it next wg call.

WG discussion today: yes to use separator bytes.

@GarethCOliver
Copy link
Contributor Author

Updated to remove thumbprint.

My review of documentation of existing HPKE implementations is that they currently don't enforce the recommended interop limit. Given the upcoming change to text to remove that implementation I think it's safe to leave as is (but will let @martijnharing chime in once he does his research).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Define HPKE info parameter

2 participants