You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently our Anoncreds trait and anoncreds-rs implementation is hardcoded to take in prover_did instead of entropy. This is a legacy method - it's used in "indy" anoncreds exchanges, but modern anoncreds exchanges prefer entropy.
This is particularly problematic as anoncreds-rs enforces this a bit with some validation, e.g. "if using modern credential-definition-identifier (qualified), then entropy must be used instead of prover did".
However it may not be as simple as permanently switching to usage of entropy instead of prover_did, as "indy" anoncreds exchanges might be expecting the presence of prover_did...
This should be investigated and determine a suitable approach. Some ideas:
choose entropy vs prover_did on behalf of the consumer based on the type of identifier they provide (legacy or not)
allow a config/flag to be passed in to choose between entropy or prover_did - this way, protocols utilizing "indy" exchanges can opt-in to using prover_did.
Currently our
Anoncreds
trait and anoncreds-rs implementation is hardcoded to take inprover_did
instead ofentropy
. This is a legacy method - it's used in "indy" anoncreds exchanges, but modern anoncreds exchanges preferentropy
.This is particularly problematic as anoncreds-rs enforces this a bit with some validation, e.g. "if using modern credential-definition-identifier (qualified), then entropy must be used instead of prover did".
However it may not be as simple as permanently switching to usage of
entropy
instead ofprover_did
, as "indy" anoncreds exchanges might be expecting the presence ofprover_did
...This should be investigated and determine a suitable approach. Some ideas:
entropy
vsprover_did
on behalf of the consumer based on the type of identifier they provide (legacy or not)entropy
orprover_did
- this way, protocols utilizing "indy" exchanges can opt-in to usingprover_did
.related issue (see thread): openwallet-foundation/acapy#3369
The text was updated successfully, but these errors were encountered: