Document-signer certificates chain to an IACA root per Annex B
ISO/IEC 18013-5 §B.1MUSTRoles: issuer, wallet, verifier
Requirement as recorded in the ProtocolSoup registry
Document-signer certificates satisfy the Annex B profile, chain to an independently configured IACA root, and their signing key is bound by the COSE signature. When IssuerAuth is signed by the configured trust anchor itself (verified chain length 1), as in a self-signed trust-anchor mock-wallet shape, the DS-only Annex B profile checks are skipped after successful path validation and P-256 key checks.
Read §B.1 in ISO/IEC 18013-5Self-test verdict
PassCommit 97df6a8Evaluated
This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.
Tests
- TestVerifyIssuerSignedRejectsNilRoots
./internal/mdoc
Pass - TestDocumentSignerCertificateProfileRejectsInvalidFields
./internal/mdoc
Pass - TestIssuerAuthSignatureBindsRFC9360X5ChainLeaf
./internal/mdoc
Pass - TestVerifyIssuerSignedAcceptsTrustAnchorAsDocumentSigner
./internal/mdoc
Pass - TestVerifyIssuerSignedRejectsCADocumentSignerBeneathIACA
./internal/mdoc
Pass