Skip to content

Selective-Disclosure Credentials: SD-JWT VC, Token Status List, SD-CWT — draft-ietf-oauth-sd-jwt-vc, draft-ietf-oauth-status-list, draft-ietf-spice-sd-cwt#

IETF 122 (Bangkok) digest Program Core pick Bangkok · 15–21 March 2025

  • Tier: Core
  • Why: The verifiable-credential stack that digital-identity-wallet and mDL implementations are actually converging on — worth tracking as the format war (JSON vs CBOR, JWT vs mdoc) settles into "two aligned formats" rather than N incompatible ones.
  • What: sd-jwt-vc specifies data formats and validation rules for verifiable digital credentials as JSON payloads with selective disclosure via SD-JWT. status-list (TSL) defines a status mechanism and data structures for representing revocation/suspension status of tokens secured by JOSE or COSE — JWT, SD-JWT, CBOR Web Token, ISO mdoc. sd-cwt ports the same selective-disclosure technique to CBOR Web Tokens, aligned with COSE. (from abstract only)
  • How: SD-JWT/SD-CWT let a holder disclose a subset of signed claims without invalidating the issuer's signature; TSL gives verifiers a compact, cacheable way to check whether a disclosed credential has since been revoked.
  • Where applicable: General; this trio is the emerging interop baseline for digital wallets, mobile driving licenses, and any deployment needing minimal-disclosure credentials rather than all-or-nothing JWTs.