Same digest value not appearing more than once in the SD-JWT

RFC 9901 §4.1MUST NOTRoles: issuer, holder, verifier

Requirement as recorded in the ProtocolSoup registry

The same digest value MUST NOT appear more than once in the SD-JWT.

Read §4.1 in RFC 9901

Self-test verdict

PassCommit 97df6a8Evaluated 2026-10-11

This is ProtocolSoup's result against its own implementation at the commit shown. It is not a certification of ProtocolSoup or of any other product.

Tests

TestSDJWTDisclosureDigestsRejectsDuplicateCommitment
./internal/vc
Pass

Implementation

backend/internal/vc/sdjwt.go

Related requirements

SDJWT-000Trailing tilde not omitted when there is no Key Binding JWT SDJWT-002Default _sd_alg of sha-256 when not present at the top level

All RFC 9901 requirements · OID4VCI protocol page