ES256 with P-256 and SHA-256 supported for validation

HAIP 1.0 §7MUSTRoles: wallet

Requirement as recorded in the ProtocolSoup registry

Wallets MUST, at minimum, support ECDSA with P-256 and SHA-256 (ES256 / COSE -7) for validating Wallet Attestations including PoP, Key Attestations, jwt proofs, and signed Issuer metadata as applicable.

Read §7 in HAIP 1.0

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestGenerateEphemeralEncryptionKeyIsP256
./cmd/walletharness
Pass
TestHAIPAttestationJWTBuildersUseExpectedHeaders
./cmd/walletharness
Pass

Implementation

backend/cmd/walletharness/haip_issuance.go
backend/cmd/walletharness/oid4vci_client.go

Related requirements

HAIP-VP-002Independently issued SD-JWT VCs validate to a configured trust anchor

All HAIP 1.0 requirements · OID4VCI protocol page