HDK support in Toolbox

[sander]

The EU Digital Identity Wallet Toolbox does not yet suggest HDK, and the current high level requirements may make it impossible to implement. See the initial draft of feedback.md. We should continue this analysis and share our insights with the European Commission and/or Expert Group. Ideally on behalf of multiple Pilot participants.

Who wants to do a next iteration of the analysis?

[sander]

Discussed 2024-06-03. Mario will share the work so far with the Potential architecture board on 2024-06-05 and invite Sander to discuss this week how to collaborate. Possibly someone at the board can lead this analysis, as there is synergy with the ARF review the board is doing.

[sander]

Discussed 2024-06-10 with Potential WP2. I’ll pitch at the AB on 2024-06-19 the request for coordination. At the end of June, WP2 has an offsite to prepare an ARF 1.4.0 review, for which input is welcome until 2024-07-12, to be discussed at the AB 2024-07-17. Let’s try to collect our input for this.

[sander]

Also discussed 2024-06-10 within our working group. Sander will do an iteration on the PoA feedback. We still need volunteers to extend the ARF review. This will be easiest after reviewing #15.

[sander]

Discussed 2024-07-01: participants will ask within their organisation for support to review the ARF (#33).

[sander]

Discussed 2024-07-08: revised ARF feedback, removing a potentially contentious and off-topic proposal. We’ll submit it as a 0.1.0 open for feedback.

[sander]

2024-07-15 Remco, from initial review:

• need for instr 2 for cryptography-based binding
• wsca->WI - contrary to claims that app attestations are insufficient for LoA High

Needs more in-depth review.

[sander]

Presented to DG CNECT, who encouraged to open a conversation and related issues: eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework#282

[sander]

Getting in contact again in September after EC summer break.

[sander]

Proposed planning a meeting 2024-09-07. Got a request 2024-09-13 to align on PoA first and present that. See #61.

[sander]

Related ARF issues:

• A - Privacy risks and mitigations eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework#327 (HDKeys mentioned but parked)
• C - Wallet Unit Attestation (WUA) and key attestation eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework#333 (HDKeys in scope)

[sander]

Also related ARF issues:

• B - Re-issuance and batch issuance of PIDs and Attestations eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework#332 (HDKeys as possible solution)
• K – Combined presentation of Attestations eu-digital-identity-wallet/eudi-doc-architecture-and-reference-framework#341 (HDKeys and PoA)