Skip to content

Commit e94cd3b

Browse files
committed
fix: resolution merge conflicts
1 parent 59f7aeb commit e94cd3b

File tree

2 files changed

+9
-9
lines changed

2 files changed

+9
-9
lines changed

docs/en/wallet-attestation-issuance.rst

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ This section describes how the Wallet Provider issues a Wallet Attestation.
99
.. figure:: ../../images/wallet_instance_acquisition.svg
1010
:figwidth: 100%
1111
:align: center
12-
:target: https://www.plantuml.com/plantuml/svg/VLHFRnC_4BtxKupSmo-LyhiWmQ4Ig5LLsWg4ehR09L8qkvxiMjcC5tisfNnwx4s9jy7qiehjDt_UcpSv3u9UXcsdS137mxOYhrfh2DREIUL-gl_w2B2rxP55AQp5UT1V0taD66084Jz1WFwENKS2jnm4kQOHXNqFBr6Vw0akH2Y2n3g6YyLjs4DH0fo4tbjk6a_4nUmBxtRMa8SAwmsn6KEhUgEKIXtz_o5MF8Cx-Z5G441WUWJNazyNanPboJw-May14FPPfmqbedQ7GgbtfUBdEUTbI_K6x1ek_LClhl7OjxQ66_Jc4Jr18hRa1snWfdNxVBlQqDDAiD7w56m0tA7jiEf8JJDV4wS6KqCCrBUqZSSEOYZqQ7tATxWT4_P3fVKS_hhsTXSBAUNP2O7RaKyavb4UEFbyUttpS7rtTVL5xPaS2se39C71hK5QWeza_gY6RC1LWfR1Ie0j2HeKLCGcLJgGYNMoz5gpIoxGMT1nJF4p8ZDjM7iARGxOOvwroRU6fecA0aPqtLbYMQN-LYs6Ley6kR-vUFFstUoGR0v5IK-BIL-Pzy8jbZoPTh0Demm-be3ta4wpMQcdEHGjChtE4yrjeOIp8aULdh9aAHIpfRKkyIfu_p2yHojjASySocJdaALTSedRFnGVDIApBvYjNtRsn6NtnEOL0YyzbzSX7Slha1Rxw0yiROHbAnOx-ulCk0Qx-Dke8LXkYYFCEv5z_Yt5e53MgF1OKBi4A-fVH9RrJewTW2yzbPqmMS6opA5t7EXuAQVd6AlEYSsmxNu3
12+
:target: https://www.plantuml.com/plantuml/svg/VLHDRnCn4BtxLupS0waKBaXmg0HgLKfRWL3K5hX4YcRNazrHDlPYpsu9lnvxcsQtnUrb5TjlFjwRUJaDWbwwRQEm4sUxRK5UrMm8riv9uVweDsq4SCajMb4AIt4Uz8z0NWC6w4B4Jn2WVs7JaC2r3OAsf065RGjFKP-fvv8YIgZoB3ku9J_Sd2skmqCCIe2Zq7gsLUM9RBRCmhkU3NaeiDoGDKDeKMwKKgcrjvzYwHEueTyT1G44I_VWMl8ex2n8ZRAqFhwofm08-wnd8X4-O19Zxb4eaL0gVlOvpsigDy1hEFUxLbpbiQsvX2lqvXuzmLVQmTBUOGKphUlzxMf3kvLWfVKnS03iaHii6bBJp9TaKuEf8GlKrhIDnmPYABJ8FkKxt0u9swxGUWx_NNlkOo6bl7L2u7hoYSGyoWD7twulh-ukRouklgi79iy5vG19S71ha9hW2vb7rT0QS8KWMs09i2L1WuAAh4cL3cHYdL5whQrBww17GOSnnS-076d3sbEe9m43Pg_DU6jecYWhO4IN3PELLUflLMEezR0WjrTdxzv_c1sIpI4hwN4kwMlpNhZ5qawc7RYoA9sF9U0ZfDDibkjf3jaLcLwF4ntRGWadMOugFOsIyQFBLXW2-JH4hNFSClj_6E0zI_rIhZdaISzXb7XfSnnVK7xGYinGT6A1_8PFjksMh7c5nDFT6ssHZdbR98C_-qTBpc3BmjZmNpA37VhuswWkiAsoenozCUxxpnI3GgD6-SUiudbeRWPvP4xpkBqJyBcd_4PCxPYLEhJE1dfkqEavngfJigRRDly0
1313

1414
Sequence Diagram for Wallet Attestation acquisition
1515

@@ -44,15 +44,15 @@ Below is a non-normative example of the ``client_data`` JSON object.
4444
**Steps 8-10**: The Wallet Instance:
4545

4646
* produces an ``hardware_signature`` value by signing the ``client_data_hash`` with the Wallet Hardware's private key, serving as a proof of possession for the Cryptographic Hardware Keys.
47-
* requests the Key Attestation API to create an ``key_attestation`` value linked to the ``client_data_hash``.
48-
* receives a signed ``key_attestation`` value from the Key Attestation API, authenticated by the OEM.
47+
* requests the Device Integrity Service to create an ``integrity_assertion`` value linked to the ``client_data_hash``.
48+
* receives a signed ``integrity_assertion`` value from the Device Integrity Service, authenticated by the OEM.
4949

50-
.. note::
51-
``key_attestation`` is a custom payload generated by Key Attestation API, signed by device OEM and encoded in base64 to have uniformity between different devices.
50+
.. note::
51+
``integrity_assertion`` is a custom payload generated by Device Integrity Service, signed by device OEM and encoded in base64 to have uniformity between different devices.
5252

5353
**Steps 11-12 (Wallet Attestation Issuance Request)**: The Wallet Instance:
5454

55-
* Constructs the Wallet Attestation Request in the form of a JWT. This JWT includes the ``key_attestation``, ``hardware_signature``, ``nonce``, ``hardware_key_tag``, ``cnf`` and other configuration related parameters (see :ref:`Table of the Wallet Attestation Request Body <table_key_binding_request_claim>`) and is signed using the private key of the initially generated ephemeral key pair.
55+
* Constructs the Wallet Attestation Request in the form of a JWT. This JWT includes the ``integrity_assertion``, ``hardware_signature``, ``nonce``, ``hardware_key_tag``, ``cnf`` and other configuration related parameters (see :ref:`Table of the Wallet Attestation Request Body <table_key_binding_request_claim>`) and is signed using the private key of the initially generated ephemeral key pair.
5656
* Submits the Wallet Attestation Request to the :ref:`wallet-provider-endpoint:Wallet Attestation Issuance endpoint` of the Wallet Provider Backend.
5757

5858
The Wallet Instance MUST send the signed Wallet Attestation Request JWT as an ``assertion`` parameter in the body of an HTTP request to the Wallet Provider's :ref:`wallet-provider-endpoint:Wallet Attestation Issuance endpoint`.
@@ -64,7 +64,7 @@ The Wallet Instance MUST send the signed Wallet Attestation Request JWT as an ``
6464
3. The ``nonce`` value MUST have been generated by the Wallet Provider and not previously used.
6565
4. A valid and currently registered Wallet Instance associated with the provided MUST exist.
6666
5. The ``client_data`` MUST be reconstructed using the ``nonce`` and the ``jwk`` public key. The ``hardware_signature`` parameter value is then validated using the registered Cryptographic Hardware Key's public key associated with the Wallet Instance.
67-
6. The ``key_attestation`` MUST be validated according to the device manufacturer's guidelines. The specific checks performed by the Wallet Provider are detailed in the operating system manufacturer's documentation.
67+
6. The ``integrity_assertion`` MUST be validated according to the device manufacturer's guidelines. The specific checks performed by the Wallet Provider are detailed in the operating system manufacturer's documentation.
6868
7. The device in use MUST be free of known security flaws and meet the minimum security requirements defined by the Wallet Provider.
6969
8. The URL in the ``iss`` parameter MUST match the Wallet Provider's URL identifier.
7070

docs/en/wallet-provider-endpoint.rst

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -394,10 +394,10 @@ The body of the Wallet Attestation SD-JWT contains the following claims:
394394
- REQUIRED. Credential type value MUST be an HTTPS URL String and it MUST be set to ``wallet.atestation.example/v1.0``.
395395
- Section 3.2.2.2 `SD-JWT-VC`_.
396396
* - **_sd**
397-
- REQUIRED. String containing the hash algorithm used by the Wallet Provider to generate the digests.
397+
- REQUIRED. JSON array containing a list of all disclusure's digests.
398398
- `SD-JWT`_.
399399
* - **sd_alg**
400-
- REQUIRED. JSON array containing a list of the signing algorithms (alg values) supported.
400+
- REQUIRED. String containing the hash algorithm used by the Wallet Provider to generate the disclusure's digests.
401401
- `SD-JWT`_.
402402
* - **sub**
403403
- REQUIRED. Identifier of the Wallet Instance which is the thumbprint of the Wallet Attestation JWK.

0 commit comments

Comments
 (0)