SdJwt.Net.HAIP 1.0.6

.NET 8.0 This package targets .NET 8.0. The package is compatible with this framework or higher. .NET Standard 2.1 This package targets .NET Standard 2.1. The package is compatible with this framework or higher.
There is a newer version of this package available.
See the version list below for details. 
dotnet add package SdJwt.Net.HAIP --version 1.0.6
                    


                    

                
NuGet\Install-Package SdJwt.Net.HAIP -Version 1.0.6
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="SdJwt.Net.HAIP" Version="1.0.6" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
<PackageVersion Include="SdJwt.Net.HAIP" Version="1.0.6" />
                    


                            Directory.Packages.props
                        

                    

                
<PackageReference Include="SdJwt.Net.HAIP" />
                    


                            Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package. 
paket add SdJwt.Net.HAIP --version 1.0.6
                    


                    

                
#r "nuget: SdJwt.Net.HAIP, 1.0.6"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
#:package SdJwt.Net.HAIP@1.0.6
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package. 
#addin nuget:?package=SdJwt.Net.HAIP&version=1.0.6
                    


                            Install as a Cake Addin
                        

                    

                
#tool nuget:?package=SdJwt.Net.HAIP&version=1.0.6
                    


                            Install as a Cake Tool

SdJwt.Net.HAIP - OpenID4VC HAIP

Implementation helpers for the OpenID4VC High Assurance Interoperability Profile 1.0 Final.

HAIP 1.0 Final does not define "Level 1", "Level 2", or "Level 3" compliance tiers. Earlier versions of this package exposed those names as local policy helpers. They are retained for source compatibility, but new integrations should use HAIP Final flow and credential profile validation.

What HAIP Final Covers

HAIP Final defines interoperable requirements for selected OpenID4VC flows:

  • OpenID4VCI credential issuance
  • OpenID4VP presentation via redirects
  • OpenID4VP presentation via W3C Digital Credentials API

For each selected flow, at least one credential profile is required:

  • IETF SD-JWT VC using dc+sd-jwt
  • ISO mdoc using mso_mdoc

Installation

dotnet add package SdJwt.Net.HAIP

For full OpenID4VC integrations, also reference the protocol and credential packages you use:

dotnet add package SdJwt.Net.Oid4Vci
dotnet add package SdJwt.Net.Oid4Vp
dotnet add package SdJwt.Net.Vc
dotnet add package SdJwt.Net.Mdoc
dotnet add package SdJwt.Net.StatusList

HAIP Final Validation

HaipProfileValidator validates declared implementation capabilities against the HAIP Final flow/profile requirements this package can check.

using SdJwt.Net.HAIP;
using SdJwt.Net.HAIP.Validators;

var options = new HaipProfileOptions();
options.Flows.Add(HaipFlow.Oid4VciIssuance);
options.Flows.Add(HaipFlow.Oid4VpRedirectPresentation);
options.CredentialProfiles.Add(HaipCredentialProfile.SdJwtVc);

options.SupportedCredentialFormats.Add(HaipConstants.SdJwtVcFormat);
options.SupportedJoseAlgorithms.Add(HaipConstants.RequiredJoseAlgorithm);
options.SupportedHashAlgorithms.Add(HaipConstants.RequiredHashAlgorithm);

options.SupportsAuthorizationCodeFlow = true;
options.EnforcesPkceS256 = true;
options.SupportsPushedAuthorizationRequests = true;
options.SupportsDpop = true;
options.SupportsDpopNonce = true;
options.ValidatesWalletAttestation = true;
options.ValidatesKeyAttestation = true;

options.SupportsDcql = true;
options.SupportsSignedPresentationRequests = true;
options.ValidatesVerifierAttestation = true;

options.SupportsSdJwtVcCompactSerialization = true;
options.UsesCnfJwkForSdJwtVcHolderBinding = true;
options.RequiresKbJwtForHolderBoundSdJwtVc = true;
options.SupportsStatusListClaim = true;
options.SupportsSdJwtVcIssuerX5c = true;

var validator = new HaipProfileValidator();
var result = validator.Validate(options);

if (!result.IsCompliant)
{
    foreach (var violation in result.Violations)
    {
        Console.WriteLine($"{violation.Description}: {violation.RecommendedAction}");
    }
}

Minimum Cryptographic Support

HAIP Final requires entities to support:

  • JOSE ES256 for validation
  • COSE ES256 identifiers -7 or -9, as applicable
  • SHA-256 digest generation and validation for SD-JWT VC and ISO mdoc

Ecosystems may require additional suites. Configure those as ecosystem policy; do not treat them as HAIP-defined levels.

Requirement Catalog

Use HaipRequirementCatalog to enumerate the package-local HAIP Final requirement IDs for selected flows and credential profiles:

foreach (var requirement in HaipRequirementCatalog.GetRequirements(options))
{
    Console.WriteLine($"{requirement.Id}: {requirement.Title}");
}

HaipProfileValidator also records applicable requirement IDs in HaipComplianceResult.Metadata["applicable_requirements"].

Legacy APIs

The following APIs remain available for compatibility with existing code but are not HAIP Final concepts:

  • HaipLevel.Level1_High
  • HaipLevel.Level2_VeryHigh
  • HaipLevel.Level3_Sovereign
  • Level-specific algorithm arrays in HaipConstants
  • HaipCryptoValidator and HaipProtocolValidator constructors that take HaipLevel

Use HaipProfileValidator for new HAIP 1.0 Final integrations.

Product Compatible and additional computed target framework versions.
.NET net5.0 was computed.  net5.0-windows was computed.  net6.0 was computed.  net6.0-android was computed.  net6.0-ios was computed.  net6.0-maccatalyst was computed.  net6.0-macos was computed.  net6.0-tvos was computed.  net6.0-windows was computed.  net7.0 was computed.  net7.0-android was computed.  net7.0-ios was computed.  net7.0-maccatalyst was computed.  net7.0-macos was computed.  net7.0-tvos was computed.  net7.0-windows was computed.  net8.0 is compatible.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed.  net9.0 is compatible.  net9.0-android was computed.  net9.0-browser was computed.  net9.0-ios was computed.  net9.0-maccatalyst was computed.  net9.0-macos was computed.  net9.0-tvos was computed.  net9.0-windows was computed.  net10.0 is compatible.  net10.0-android was computed.  net10.0-browser was computed.  net10.0-ios was computed.  net10.0-maccatalyst was computed.  net10.0-macos was computed.  net10.0-tvos was computed.  net10.0-windows was computed. 
.NET Core netcoreapp3.0 was computed.  netcoreapp3.1 was computed. 
.NET Standard netstandard2.1 is compatible. 
MonoAndroid monoandroid was computed. 
MonoMac monomac was computed. 
MonoTouch monotouch was computed. 
Tizen tizen60 was computed. 
Xamarin.iOS xamarinios was computed. 
Xamarin.Mac xamarinmac was computed. 
Xamarin.TVOS xamarintvos was computed. 
Xamarin.WatchOS xamarinwatchos was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (2)

Showing the top 2 NuGet packages that depend on SdJwt.Net.HAIP:

Package Downloads
SdJwt.Net.Wallet

Generic, extensible identity wallet implementation for .NET, supporting SD-JWT VC and mdoc credentials. Provides credential management, key management, OpenID4VCI/VP protocol adapters, and integration with trust infrastructure. Based on EUDI Android/iOS wallet architectures.
SdJwt.Net.Eudiw

EU Digital Identity Wallet (EUDIW) profile implementation for the SD-JWT .NET ecosystem. Provides eIDAS 2.0 compliance, ARF validation, EU Trust List integration, PID credential handling, and QEAA/EAA support for European digital identity verification.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
1.0.9 0 6/26/2026
1.0.8 175 6/8/2026
1.0.6 183 5/10/2026
1.0.5 181 5/9/2026
1.0.4 177 4/30/2026
1.0.3 179 4/28/2026
1.0.3-alpha.0.2 59 4/28/2026
1.0.2 187 3/13/2026
1.0.1 182 3/1/2026
1.0.0 123 2/28/2026

HAIP 1.0 Final flow/profile validation and legacy policy
                       helpers. Ready for .NET 10.