Skip to content

CAdESRSASignature2020 signature suite does not conform JSONLD context for VC Data Model

One of the issues I have run into in implementation of the CAdESRSASignature2020 signature suite for Linked Data proofs is that within the proof object in a VC, the verificationMethod is currently being used for the public certificate of the eIdas seal, in the place of the DID key identifier.

"proof": {
  "type": "CAdESRSASignature2020",
  "proofPurpose": "assertionMethod",
  "created": "2019-08-23T20:21:34Z",
  "verificationMethod": "-----BEGIN CERTIFICATE-----MIICUTCCAfugAwIBAgIBA... -----END CERTIFICATE-----",
  "cades": "-----BEGIN CMS----- iG9w0BCRABCaB0MHICAQAwDQYLK... -----END CMS-----"
}

The issue here is that the JSONLD contexts for vc poofs defines the verificationMethod as a URI, which the above example does not conform to. See https://w3c-ccg.github.io/security-vocab/#verificationMethod

Perhaps we could define a different structure for providing the certificate?