Skip to content

Commit

Permalink
Deploy to GitHub pages
Browse files Browse the repository at this point in the history
  • Loading branch information
github-actions[bot] authored Apr 3, 2024
1 parent 77a91d1 commit 24d33ec
Show file tree
Hide file tree
Showing 6 changed files with 11 additions and 11 deletions.
Binary file modified wallet-attestation/en/.doctrees/environment.pickle
Binary file not shown.
Binary file modified wallet-attestation/en/.doctrees/wallet-attestation.doctree
Binary file not shown.
10 changes: 5 additions & 5 deletions wallet-attestation/en/_sources/wallet-attestation.rst.txt
Original file line number Diff line number Diff line change
Expand Up @@ -24,14 +24,14 @@ The following requirements for the Wallet Attestation are met:
- Each Wallet Instance SHOULD be able to request multiple attestations with different ephemeral public keys associated to them. This requirement provides a privacy-preserving measure, as the public key MAY be used as a tracking tool during the presentation phase (see also the point listed below).
- The Wallet Attestation MUST NOT contain any information that can be used to directly reference the User.
- The Wallet Instances MUST secure a Wallet Attestation as a prerequisite for transitioning to the Operational state, as defined by `ARF`_.
- The private keys MUST be generated and stored in the WSCD following different approaches:
- Private keys MUST be generated and stored in the WSCD using at least one of the approaches listed below:

- **Internal WSCD**: The WSCD here is solely based on the native cryptographic hardware of the User device, for instance the (iOS) Secure Enclave or the (Android) Hardware Backed Keystore or Strongbox.
- **External WSCD**: The WSCD here is based on a remote Hardware Security Module (HSM) hosted by (or on behalf of) the Wallet Provider or is a chip external to the User device, e.g., a smart card based on GlobalPlatform, and supporting JavaCard.
- **Hybrid WSCD**: The WSCD here is based on a dedicated, internal chip integrated in the User device, e.g. an eUICC based on GlobalPlatform, and supporting JavaCard.
- **Internal WSCD**: In this approach, the WSCD relies entirely on the device's native cryptographic hardware, such as the Secure Enclave on iOS devices or the Hardware Backed Keystore or Strongbox on Android devices.
- **External WSCD**: Here, the WSCD utilizes a remote Hardware Security Module (HSM) managed by (or on behalf of) the Wallet Provider, or it could be an hardware external to the User's device, such as a smart card compliant with _GlobalPlatform_ and supporting _JavaCard_.
- **Hybrid WSCD**: In this case, the WSCD involves a pluggable internal hardware component within the User's device, such as an _eUICC_ that adheres to _GlobalPlatform_ standards and supports _JavaCard_.

.. warning::
The implementation profile specification, that will be given below, MUST support only the **Internal WSCD**. Future versions of this specification MAY include other approaches depending on the `AAL` required.
At the current stage, the current implementation profile defined in this document supports only the **Internal WSCD**. Future versions of this specification MAY include other approaches depending on the required `AAL` .

Static Component View
---------------------
Expand Down
2 changes: 1 addition & 1 deletion wallet-attestation/en/searchindex.js

Large diffs are not rendered by default.

10 changes: 5 additions & 5 deletions wallet-attestation/en/wallet-attestation.html
Original file line number Diff line number Diff line change
Expand Up @@ -1079,17 +1079,17 @@ <h2>Requirements<a class="headerlink" href="#requirements" title="Permalink to t
<li><p>Each Wallet Instance SHOULD be able to request multiple attestations with different ephemeral public keys associated to them. This requirement provides a privacy-preserving measure, as the public key MAY be used as a tracking tool during the presentation phase (see also the point listed below).</p></li>
<li><p>The Wallet Attestation MUST NOT contain any information that can be used to directly reference the User.</p></li>
<li><p>The Wallet Instances MUST secure a Wallet Attestation as a prerequisite for transitioning to the Operational state, as defined by <a class="reference external" href="https://github.com/eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework">ARF</a>.</p></li>
<li><p>The private keys MUST be generated and stored in the WSCD following different approaches:</p>
<li><p>Private keys MUST be generated and stored in the WSCD using at least one of the approaches listed below:</p>
<ul>
<li><p><strong>Internal WSCD</strong>: The WSCD here is solely based on the native cryptographic hardware of the User device, for instance the (iOS) Secure Enclave or the (Android) Hardware Backed Keystore or Strongbox.</p></li>
<li><p><strong>External WSCD</strong>: The WSCD here is based on a remote Hardware Security Module (HSM) hosted by (or on behalf of) the Wallet Provider or is a chip external to the User device, e.g., a smart card based on GlobalPlatform, and supporting JavaCard.</p></li>
<li><p><strong>Hybrid WSCD</strong>: The WSCD here is based on a dedicated, internal chip integrated in the User device, e.g. an eUICC based on GlobalPlatform, and supporting JavaCard.</p></li>
<li><p><strong>Internal WSCD</strong>: In this approach, the WSCD relies entirely on the device's native cryptographic hardware, such as the Secure Enclave on iOS devices or the Hardware Backed Keystore or Strongbox on Android devices.</p></li>
<li><p><strong>External WSCD</strong>: Here, the WSCD utilizes a remote Hardware Security Module (HSM) managed by (or on behalf of) the Wallet Provider, or it could be an hardware external to the User's device, such as a smart card compliant with _GlobalPlatform_ and supporting _JavaCard_.</p></li>
<li><p><strong>Hybrid WSCD</strong>: In this case, the WSCD involves a pluggable internal hardware component within the User's device, such as an _eUICC_ that adheres to _GlobalPlatform_ standards and supports _JavaCard_.</p></li>
</ul>
</li>
</ul>
<div class="admonition warning">
<p class="admonition-title">Warning</p>
<p>The implementation profile specification, that will be given below, MUST support only the <strong>Internal WSCD</strong>. Future versions of this specification MAY include other approaches depending on the <cite>AAL</cite> required.</p>
<p>At the current stage, the current implementation profile defined in this document supports only the <strong>Internal WSCD</strong>. Future versions of this specification MAY include other approaches depending on the required <cite>AAL</cite> .</p>
</div>
</section>
<section id="static-component-view">
Expand Down
Binary file modified wallet-attestation/it/.doctrees/environment.pickle
Binary file not shown.

0 comments on commit 24d33ec

Please sign in to comment.