Skip to content

SPICE: Selective Disclosure CWT (SD-CWT) + Verifiable Digital Credentials architecture — draft-ietf-spice-sd-cwt, draft-ietf-spice-vdcarch#

IETF 123 (Madrid) digest Program Adjacent pick Madrid · 19–25 July 2025

  • Tier: Adjacent
  • Why: The CBOR-native counterpart to SD-JWT, plus a reference architecture for direct credential presentation. This is the digital-credential/wallet direction of identity, adjacent to your authn interests and worth watching as it converges with OAuth's SD-JWT VC work.
  • What: sd-cwt brings SD-JWT-style selective disclosure to CBOR Web Tokens, aligned with COSE; vdcarch defines a reference architecture introducing a "presentation mediator" for managing and selectively disclosing credentials. (from abstract only)
  • How: SD-CWT adapts the selective-disclosure technique to CBOR/COSE encodings; the architecture centers a mediator component that handles presentation and disclosure with defined privacy properties.
  • Where applicable: General; constrained/IoT and mdoc-adjacent ecosystems favor the CBOR path.