Skip to content

MIssing alg header in the Mdoc device signing key #1407

@antonio-ivanovski

Description

@antonio-ivanovski

When verifying the mdoc device signature with the included device key, the key itself fail to import within the auth0/mdl library (internally using cose-kit to convert to JWK and import with jose). The issue is that the alg header is not included in the device signing key part of the mdoc.

More info can be fond at: auth0-lab/mdl#61
Creating the same issue here as it is probably good idea to include the alg header so the verifiers don't have to guess the value.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

Status

Backlog

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions