JSON Web Proof#

Mike Jones, David Waite (JOSE WG)

• Why: Selective-disclosure credentials are moving from SD-JWT toward BBS-style ZK-friendly algorithms; JWP is the container that makes them usable in the JWT-shaped ecosystem the PM's identity stack already speaks.
• What: A JWS-like container ("JSON Web Proof") that integrity-protects multiple payloads in one message and adds a presentation form supporting selective disclosure of individual payloads, plus a Presentation Header against replay. Recent -13 changes: proof_alg (separate from JOSE/COSE algorithm registries) in JWKs/COSE_Keys, and deterministic crypto operations in all examples.
• How: Issuer proves over multiple payload slots; holder presents a subset with per-claim disclosure. Open work presented: JSON Proof Token subclaim support (selective disclosure within claims, e.g., address-country — proposed syntax aligns with SD-JWT VC metadata), BBS extensions (experimental, described separately), BBS blind signatures (holder-known messages), and per-verifier pseudonyms.
• Where applicable: Digital-credential ecosystems (wallets, verifiable credentials) targeting unlinkability. WG draft, active; BBS-related pieces are explicitly less mature than the core.