Credential proof nonce is short-lived and single-use
OID4VCI 1.0 §7 and 8.2MUSTRoles: issuer
Requirement as recorded in the ProtocolSoup registry
A credential proof nonce is short-lived and single-use, including when two Credential Requests attempt to consume it concurrently.
Read §7 and 8.2 in OID4VCI 1.0Self-test verdict
PassCommit 97df6a8Evaluated
This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.
Tests
- TestCredentialNonceConsumptionIsAtomic
./internal/protocols/oid4vci
Pass