SID-CRYPTO-04 — COSE Sign1 and mDOC Cryptography
| Property | Value |
|---|---|
| Owner | platform |
| Category | technical |
| CSF Function | protect |
| Group | Cryptography Controls |
Description
COSE_Sign1 signing/verification for mDOC (ISO 18013-5): ES256/ES384/ ES512/EdDSA. Ephemeral ECDH P-256 key generation for OID4VP response encryption with TTL-based auto-eviction cache. MSO digest verification ensures per-element integrity.
Components
Source References
Framework Requirements
EUDI Security Requirements: GEN-7.5-02, WUP-8.2.3-Sec-14, WIN-8.4.4-02
FitCEM Wallet Instance: FIT-CR-01
ISO 27001 Annex A: A.8.24