Comments (3)
swcurran
commented on June 22, 2024
This requires a fix to the Indy SDK. The change in the format in the presentation is necessary.
It might be possible to code around the issue in the Indy SDK if anyone is interested in taking that path.
The (strong) recommendation is to upgrade from the Indy SDK to use the shared components.
from anoncreds-rs.
TimoGlastra
commented on June 22, 2024
Why would this require a change in the indy-sdk? was the change in anoncreds-cl-signatures made because of a security concern?
Because it would mean all deployments now using Indy SDK will be broken and this has quite some implications for adopting AnonCreds RS v0.2 over v0.1 as you don't always control the verifier (the important part here it seems)
from anoncreds-rs.
swcurran
commented on June 22, 2024
This was made because of a vulnerability. We let Aries maintainers know some time ago about it, and will be publishing the vulnerability information soon.
from anoncreds-rs.
Related Issues (20)
- `tailsLocation` is pulling double duty HOT 6
- Update object finalizers and add keepalives - from indy-shared-rs HOT 1
- Replace the current ursa dependency with AnonCreds clsignatures HOT 2
- Full revocation status list is actually required for revocable credential issuance? HOT 3
- Update JS wrapper HOT 1
- Strings not freed in the JS wrapper? HOT 3
- General request to loosen dependency versions wherever possible HOT 5
- Does not compile without zeroize feature (--no-default-features)
- ImportError create_link_secret from anoncreds-test 0.1.0.dev10 HOT 2
- -dev version of JavaScript wrapper should be released under dev tag on NPM HOT 1
- Provide sample HOT 4
- Verifying a proof containing a value of "0" fails
- [Question] How to get revocation status list for a prover? HOT 8
- @hyperledger/anoncreds-nodejs invalid reference to binary v0.2.0-dev.5 HOT 1
- release assets HOT 2
- Issuing credentials with optional values HOT 5
- Proofs created between AnonCreds RS and Indy SDK are different HOT 15
- Should `id` be included in AnonCreds W3C credential, or is it 'valid' to only include it in the W3C credential HOT 2
- Numbers should be included as numbers in the AnonCreds W3C VC HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from anoncreds-rs.