Selective Disclosure for JSON Web Tokens: normative requirements

RFC 9901Read the specification6 requirements tracked in the ProtocolSoup registry

Self-test verdicts

Verdicts are for commit 97df6a8, evaluated 2026-10-11.

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Section 3

SDJWT-000 Trailing tilde not omitted when there is no Key Binding JWT §3 MUST NOT Pass

Section 4

SDJWT-001 Same digest value not appearing more than once in the SD-JWT §4.1 MUST NOT Pass
SDJWT-002 Default _sd_alg of sha-256 when not present at the top level §4.1.1 MUST Pass

Section 7

Related protocol page: OID4VCI