Skip to content

JSON Web Proof & JSON Proof Token — draft-ietf-jose-json-web-proof, draft-ietf-jose-json-proof-token#

IETF 122 (Bangkok) digest Program Wildcard pick Bangkok · 15–21 March 2025

Draft Slides Session recording Materials

  • Tier: Wildcard
  • Why: Not a direct fit for your day-to-day work, but it's a structurally different answer to selective disclosure than SD-JWT (Core, above): a new container format built for Zero-Knowledge Proof–based unlinkable presentation, not just "redact fields from a signed blob." Worth having on the radar as the more ambitious long-term direction.
  • What: JSON Web Proof (JWP) is a new container format, parallel to JWS, that can integrity-protect multiple payloads in one message and supports a presentation form with selective disclosure, additional proof computation, and replay protection. JSON Proof Token (JPT) is the claims-token profile built on JWP, explicitly supporting reusability and unlinkability via Zero-Knowledge Proofs. (from abstract only, individual submissions — not yet WG-adopted at draft-ietf-* status for the JOSE variants shown, worth checking current adoption state before assuming momentum)
  • How: Unlike JWS's single signed payload, JWP structures multiple payloads so a holder can selectively disclose a subset and, with ZKP-capable algorithms, prove statements about undisclosed payloads without revealing them or making separate presentations linkable to each other.
  • Where applicable: General, but aimed squarely at privacy-sensitive credential presentation (digital ID wallets) where even SD-JWT's "redact and reveal" model still leaks presentation-linkability that ZKPs are designed to avoid.