Skip to content

Relevant Standards

Note: This page is auto-generated from doc/standards.xlsx. To update, modify the Excel file and run: .venv/bin/python script/excel_to_markdown.py Note: Tables on this page are designed to display at full browser width. On smaller screens, use horizontal scrolling to view all columns.

Identification of standards&TS

Deliverables Title Organisation Type Version Status Link Considered in STS Roadmap? Further refined by IA? Relevance Applicable to credentials issuance process? Applicable to credentials issuance protocol? Applicable to credentials presentation protocol? Applicable to credentials format? Applicable to Trust models? Applicable to credentials validation? Other applicable aspects? Roles to which it is applicable
https://github.com/orgs/eu-digital-identity-wallet/projects/29/views/4?sliceBy%5Bvalue%5D=ISO Deliverables classified in that category
are relevant to the generation of the
credentials and its provisionning. This
does not include deliverables defining
mechanisms which establish trust in the
credential (e.g. trusted list). These
deliverables are classified in the
column "Applicable to trust model".
Deliverables classified in that category
are relevant to the generation of the
credentials and its provisionning. This
does not include deliverables defining
mechanisms which establish trust in the
credential (e.g. trusted list). These
deliverables are classified in the
column "Applicable to trust model".
Deliverables classified in that category
are relevant to the presentation of
credentials and the associated security
mechanisms involving the credential
carrier/holder. It only includes
deliverables applicable to the
interaction between the credential
carrier/holder and the RP. This does not
include deliverables defining mechanisms
which allow ascertaining trust in the
credential (e.g. trusted list). These
deliverables are classified in the
column "credential validation".
Deliverables defining encoding and format of credentials. This category includes deliverables
which are relevant for establishing and
verifying the trust in (1) credentials
and (2) the surounding stakeholders.
Deliverables referenced in that category
may also be relevant all along (1) the
credentials lifecycle (issuance and
presentation) and (2) the lifecycle of
these surounding stakeholders (e.g. for
revokation of a Wallet Unit or access
rights of a RP). Nevertheless, these
deliverables should not be referenced in
these other categories but only in this
one.
This category includes deliverables
which are relevant so that a RP which
receives a credential can verify its
validity status. Deliverables in that
category are applicable to (1) the
actions carried out by a RP to verify
the validity status of a credential it
received, and (2) the inputs data it
should leverage on to carry out that
validation.
if so, details about the aspect should be provided The following roles are
considered:
1/Wallet
Provider
2/Credential
issuer
3/Relying
Party
4/Other
Note : a deliverable
may be applicable to several roles
TS 119 312 Electronic Signatures and Trust Infrastructures (ESI);
Cryptographic Suites
ETSI TS 1.5.1 Published https://www.etsi.org/deliver/etsi_ts/119300_119399/119312/01.05.01_60/ts_119312v010501p.pdf Yes
TS 119 602 Electronic Signatures and Trust
Infrastructures (ESI);
Lists of
trusted entities;
Data model
ETSI TS 1.1.1 Published https://www.etsi.org/deliver/etsi_ts/119600_119699/119602/01.01.01_60/ts_119602v010101p.pdf Yes Trusted list Y
TS 119 605 Electronic Signatures and Trust
Infrastructures (ESI);
Trusted
lists;
Procedures for using and
interpreting trusted
lists;
Processing trusted lists and
trusted list content
ETSI TS Draft Yes Trusted list Y
TS 119 612 Electronic Signatures and Trust Infrastructures (ESI);
Trusted Lists
ETSI TS 2.4.1 Published https://www.etsi.org/deliver/etsi_ts/119600_119699/119612/02.04.01_60/ts_119612v020401p.pdf No COMMISSION IMPLEMENTING DECISION (EU)
2025/2164 of 27 October 2025
amending
Implementing Decision (EU) 2015/1505 as
regards the version of the standard on
which the common template for the
trusted lists is
based
https://eur-lex.europa.eu/eli/dec_impl/2025/2164/oj/eng
Trusted list Y
TS 119 612 Electronic Signatures and Trust Infrastructures (ESI);
Trusted Lists
ETSI TS 1.2.1 Published https://www.etsi.org/deliver/etsi_ts/119600_119699/119612/01.02.01_60/ts_119612v010201p.pdf No This version is not considered by
COMMISSION IMPLEMENTING DECISION (EU)
2025/2164 of 27 October 2025
amending
Implementing Decision (EU) 2015/1505 as
regards the version of the standard on
which the common template for the
trusted lists is
based
https://eur-lex.europa.eu/eli/dec_impl/2025/2164/oj/eng
Trusted list (this version is obsolete) Y
TS 119 615 Electronic Signatures and
Infrastructures (ESI);
Trusted
lists;
Procedures for using and
interpreting European Union Member
States national trusted lists
ETSI TS 1.3.1 Published https://www.etsi.org/deliver/etsi_ts/119600_119699/119615/01.03.01_60/ts_119615v010301p.pdf No Trusted list Y
EN 319 411-1 Electronic Signatures and Trust
Infrastructures (ESI);
Policy and
security requirements for Trust Service
Providers issuing certificates;
Part
1: General requirements
ETSI EN 1.5.1 Published https://www.etsi.org/deliver/etsi_en/319400_319499/31941101/01.05.01_60/en_31941101v010501p.pdf No Y
TS 119 411-8 Electronic Signatures and Trust
Infrastructures (ESI);
Policy and
security requirements for Trust Service
Providers issuing certificates;
Part
8: Access Certificate Policy for EUDI
Wallet Relying Parties
ETSI TS 1.1.1 Published https://www.etsi.org/deliver/etsi_ts/119400_119499/11941108/01.01.01_60/ts_11941108v010101p.pdf No Y
TS 119 461 Electronic Signatures and Trust
Infrastructures (ESI);
Policy and
security requirements for trust service
components providing identity proofing
of trust service subjects
ETSI TS 2.1.1 Published https://www.etsi.org/deliver/etsi_ts/119400_119499/119461/02.01.01_60/ts_119461v020101p.pdf No Y Y?
TS 119 475 Electronic Signatures and Trust
Infrastructures (ESI);
Relying party
attributes supporting EUDI Wallet user's
authorization decisions
ETSI TS 1.1.1 Published https://www.etsi.org/deliver/etsi_ts/119400_119499/119475/01.01.01_60/ts_119475v010101p.pdf No Y
TR 119 476 Electronic Signatures and Trust
Infrastructures (ESI);
Analysis of
selective disclosure and zero-knowledge
proofs applied to Electronic Attestation
of Attributes
ETSI TR 1.2.1 Published https://www.etsi.org/deliver/etsi_tr/119400_119499/119476/01.02.01_60/tr_119476v010201p.pdf No Useful where ZKP are considered Y Y
TR 119 476-1 Electronic Signatures and Trust
Infrastructures (ESI);
Selective
disclosure and zero-knowledge proofs
applied to Electronic Attestation of
Attributes;
Part 1: Feasibility study
ETSI TR 1.3.1 Published https://www.etsi.org/deliver/etsi_tr/119400_119499/11947601/01.03.01_60/tr_11947601v010301p.pdf No Useful where ZKP are considered Y Y
EN 319 412-1 Electronic Signatures and Trust
Infrastructures (ESI);
Certificate
Profiles;
Part 1: Overview and common
data structures
ETSI EN 1.6.1 Published https://www.etsi.org/deliver/etsi_en/319400_319499/31941201/01.06.01_60/en_31941201v010601p.pdf No Y
EN 319 412-2 Electronic Signatures and Trust
Infrastructures (ESI);
Certificate
Profiles;
Part 2: Certificate profile
for certificates issued to natural
persons
ETSI EN 2.4.1 Published https://www.etsi.org/deliver/etsi_en/319400_319499/31941202/02.04.01_60/en_31941202v020401p.pdf No Y
EN 319 412-3 Electronic Signatures and
Infrastructures (ESI);
Certificate
Profiles;
Part 3: Certificate profile
for certificates issued to legal persons
ETSI EN 1.3.1 Published https://www.etsi.org/deliver/etsi_en/319400_319499/31941203/01.03.01_60/en_31941203v010301p.pdf No Y
TS 119 412-6 Electronic Signatures and Trust
Infrastructures (ESI);
Certificate
Profiles;
Part 6: Certificate profile
requirements for PID, Wallet,
EAA,
QEAA, and PSBEAA providers
ETSI TS 1.1.1 Published https://www.etsi.org/deliver/etsi_ts/119400_119499/11941206/01.01.01_60/ts_11941206v010101p.pdf No Y
TS 119 412-6 Electronic Signatures and Trust
Infrastructures (ESI);
Certificate
Profiles;
Part 6: Certificate profile
requirements for PID, Wallet,
EAA,
QEAA, and PSBEAA providers
ETSI TS 1.1.3 Draft No Y
TS 119 431-1 Electronic Signatures and Trust
Infrastructures (ESI);
Policy and
security requirements for trust service
providers;
Part 1: TSP services
operating a remote QSCD / SCDev
ETSI TS 1.3.1 Published https://www.etsi.org/deliver/etsi_ts/119400_119499/11943101/01.03.01_60/ts_11943101v010301p.pdf No Applicable for electronic signature
TS 119 431-2 Electronic Signatures and
Infrastructures (ESI);
Policy and
security requirements for trust service
providers;
Part 2: TSP service
components supporting AdES digital
signature creation
ETSI TS 1.2.1 Published https://www.etsi.org/deliver/etsi_ts/119400_119499/11943102/01.02.01_60/ts_11943102v010201p.pdf No Applicable for electronic signature
TS 119 432 Electronic Signatures and
Infrastructures (ESI);
Protocols for
remote digital signature creation
ETSI TS 1.2.1 Published https://www.etsi.org/deliver/etsi_ts/119400_119499/119432/01.02.01_60/ts_119432v010201p.pdf No Applicable for electronic signature
EN 319 132-1 Electronic Signatures and Trust
Infrastructures (ESI);
XAdES digital
signatures;
Part 1: Building blocks
and XAdES baseline signatures
ETSI EN 1.3.1 Published https://www.etsi.org/deliver/etsi_en/319100_319199/31913201/01.03.01_60/en_31913201v010301p.pdf No Applicable for electronic signature
TS 119 182-1 Electronic Signatures and Trust
Infrastructures (ESI);
JAdES digital
signatures;
Part 1: Building blocks
and JAdES baseline signatures
ETSI TS 1.2.1 Published https://www.etsi.org/deliver/etsi_ts/119100_119199/11918201/01.02.01_60/ts_11918201v010201p.pdf No Applicable for electronic signature
EN 319 122-1 Electronic Signatures and
Infrastructures (ESI);
CAdES digital
signatures;
Part 1: Building blocks
and CAdES baseline signatures
ETSI EN 1.3.1 Published https://www.etsi.org/deliver/etsi_en/319100_319199/31912201/01.03.01_60/en_31912201v010301p.pdf No Applicable for electronic signature
EN 319 162-1 Electronic Signatures and
Infrastructures (ESI);
Associated
Signature Containers (ASiC);
Part 1:
Building blocks and ASiC baseline
containers
ETSI EN 1.1.1 Published https://www.etsi.org/deliver/etsi_en/319100_319199/31916201/01.01.01_60/en_31916201v010101p.pdf Yes Applicable for electronic signature
EN 319 142-1 Electronic Signatures and
Infrastructures (ESI);
PAdES digital
signatures;
Part 1: Building blocks
and PAdES baseline signatures
ETSI EN 1.2.1 Published https://www.etsi.org/deliver/etsi_en/319100_319199/31914201/01.02.01_60/en_31914201v010201p.pdf No Applicable for electronic signature
EN 319 142-2 Electronic Signatures and Trust
Infrastructures (ESI);
PAdES digital
signatures;
Part 2: Additional PAdES
signatures profiles
ETSI EN 1.2.1 Published https://www.etsi.org/deliver/etsi_en/319100_319199/31914202/01.02.01_60/en_31914202v010201p.pdf No Applicable for electronic signature
TS 18098 Guidelines for the onboarding of user
personal identification data within
European Digital Identity Wallets
CEN TS Under publication Yes Y Y
TS 18297 EUDI Wallet Held Attributes Access Control, operation and management CEN TS Draft Yes
OpenID4VCI OpenID for Verifiable Credential Issuance 1.0 OpenID 1.0 Published https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html Yes Y Y Y Y
OpenID4VP OpenID for Verifiable Presentations 1.0 OpenID 1.0 Published https://openid.net/specs/openid-4-verifiable-presentations-1_0.html Yes Y Y Y
Conformance tests for OID4VC OpenID Published https://openid.net/certification/conformance-testing-for-openid-for-verifiable-presentations/ Yes Y Y Y Y Y
Oauth 2.0 OAuth 2.0 Multiple Response Type Encoding Practices OpenID 1.0 Published https://openid.net/specs/oauth-v2-multiple-response-types-1_0.html No Response encoding Y Y
HAIP OpenID4VC High Assurance Interoperability Profile 1.0 - draft 05 OpenID 24 December 2025 - v1.0 Published https://openid.net/specs/openid4vc-high-assurance-interoperability-profile-1_0-05.html Yes Y Y Y Y Y
OpenID Connect Core 1.0 incorporating errata set 2 OpenID Published https://openid.net/specs/openid-connect-core-1_0.html Yes
OpenID Connect Relying Party Metadata Choices 1.0 - draft 04 OpenID v1.0 draft04 Draft https://openid.net/specs/openid-connect-rp-metadata-choices-1_0.html No Y
OpenID Federation 1.0 - draft 47 OpenID v1.0 draft47 Draft https://openid.net/specs/openid-federation-1_0.html No Y
OpenID Federation for Wallet Architectures 1.0 - draft 04 OpenID v1.0 draft04 Draft https://openid.github.io/federation-wallet/main.html No Y
OpenID Identity Assurance Schema Definition 1.0 OpenID 1.0 Published https://openid.net/specs/openid-ida-verified-claims-1_0-final.html Yes
OpenID Connect for Identity Assurance Claims Registration OpenID 1.0 Published https://openid.net/specs/openid-connect-4-ida-claims-1_0-final.html Yes
VCDM Verifiable Credentials Data Model v2.0 W3C 2.0 Published https://www.w3.org/TR/vc-data-model-2.0/ Yes Y
VCDI Verifiable Credential Data Integrity 1.0 W3C 1.0 Published https://www.w3.org/TR/vc-data-integrity/ Yes To be assessed in case ZKPs would be in scope Y Y Y
Data Integrity EdDSA Cryptosuites v1.0:
Achieving Data Integrity using EdDSA
with Edwards curves
W3C 15 May 2025 Published https://www.w3.org/TR/vc-di-eddsa/ Yes Y Y Y
Data Integrity ECDSA Cryptosuites v1.0:
Achieving Data Integrity using ECDSA
with NIST-compliant curves
W3C 15 May 2025 Published https://www.w3.org/TR/vc-di-ecdsa/ Yes Y Y Y
WebAuthn Web Authentication: An API for accessing Public Key Credentials Level 2 W3C 8 April 2021 Published https://www.w3.org/TR/webauthn-2/ Yes Useful when implementing
pseudonymisation with an external token
containing a public key
Y Y Y
Bitstring Status List Bitstring Status List v1.0 W3C 15 May 2025 Published https://www.w3.org/TR/vc-bitstring-status-list/ No Useful for revocation/suspension Y Y Y
DID Decentralized Identifiers (DIDs) v1.1 W3C 24 January 2026 Published https://www.w3.org/TR/did-1.1/ No Y Y Y
JSON-LD JSON-LD 1.1 W3C 16 July 2020 Published https://www.w3.org/TR/json-ld11 No Y
DC API Digital Credentials API W3C 29 January 2026 Draft https://www.w3.org/TR/digital-credentials/ Yes See HLR OIA_08 Y
Securing Verifiable Credentials using JOSE and COSE W3C 15 May 2025 Published https://www.w3.org/TR/vc-jose-cose/ Yes Y Y
Securing Verifiable Credentials using JOSE and COSE Interoperability Report W3C 23 November 2025 Published https://w3c.github.io/vc-jose-cose-test-suite/ Yes Y Y
Data Integrity BBS Cryptosuites v1.0:
Achieving Unlinkable Data Integrity with
Pairing-based Cryptography
W3C 3 April 2025 Draft https://www.w3.org/TR/vc-di-bbs/ Yes Y Y Y Y
Subresource Integrity W3C 10 July 2025 Draft https://www.w3.org/TR/sri/ Yes
FIDO CTAP Client to Authenticator Protocol (CTAP) FIDO v2.2 July 14, 2025 Published https://fidoalliance.org/specs/fido-v2.2-ps-20250714/fido-client-to-authenticator-protocol-v2.2-ps-20250714.html Yes Useful when implementing
pseudonymisation with an external token
containing a public key
Y Y Y
FIDO CXP FIDO Credential Exchange Format (CXF) FIDO August 14, 2025 Published https://fidoalliance.org/specs/cx/cxf-v1.0-ps-20250814.html Yes
FIDO CEP Credential Exchange Protocol FIDO October 03, 2024 Draft https://fidoalliance.org/specs/cx/cxp-v1.0-wd-20241003.html Yes
RFC 5280 RFC 5280 - Internet X.509 Public Key
Infrastructure Certificate and
Certificate Revocation List (CRL)
Profile
IETF RFC Published https://datatracker.ietf.org/doc/html/rfc5280 Yes Y Y Y
RFC 6749 RFC 6749 - The OAuth 2.0 Authorization Framework IETF RFC Published https://datatracker.ietf.org/doc/html/rfc6749 No Y Y
RFC 6960 RFC 6960 - X.509 Internet Public Key
Infrastructure Online Certificate Status
Protocol - OCSP
IETF RFC Published https://datatracker.ietf.org/doc/html/rfc6960 No Y Y Y
RFC 7515 RFC 7515 - JSON Web Signature (JWS) IETF RFC Published https://www.rfc-editor.org/rfc/rfc7515 Yes
RFC 7516 RFC 7516 - JSON Web Encryption (JWE) IETF RFC Published https://datatracker.ietf.org/doc/rfc7516/ Yes
RFC 7518 RFC 7518 - JSON Web Algorithms (JWA) IETF RFC Published https://datatracker.ietf.org/doc/rfc7518/ Yes
RFC 7519 RFC 7519 - JSON Web Token (JWT) IETF RFC Published https://datatracker.ietf.org/doc/html/rfc7519 Yes Y
RFC 8152 RFC 8152 - CBOR Object Signing and Encryption (COSE) IETF RFC Published https://datatracker.ietf.org/doc/html/rfc8152 No Y
RFC 8259 RFC 8259 - The JavaScript Object Notation (JSON) Data Interchange Format IETF RFC Published https://datatracker.ietf.org/doc/rfc8259/ Yes
RFC 8392 RFC 8392 - CBOR Web Token (CWT) IETF RFC Published https://datatracker.ietf.org/doc/html/rfc8392 Yes
RFC 8610 RFC 8610 - Concise Data Definition Language (CDDL) IETF RFC Published https://www.rfc-editor.org/rfc/rfc8610.html Yes
RFC 8943 RFC 8943 - Concise Binary Object Representation (CBOR) Tags for Date IETF RFC Published https://www.rfc-editor.org/rfc/rfc8943 Yes
RFC 8949 RFC 8949 - Concise Binary Object Representation (CBOR) IETF RFC Published https://datatracker.ietf.org/doc/html/rfc8949 Yes Y
RFC 9052 RFC 9052 - CBOR Object Signing and Encryption (COSE): Structures and Process IETF RFC Published https://www.rfc-editor.org/rfc/rfc9052 Yes
RFC 9162 RFC 9162 - Certificate Transparency Version 2.0 IETF RFC Published https://datatracker.ietf.org/doc/html/rfc9162 Yes Y
RFC 9562 RFC 9562 - Universally Unique IDentifiers (UUIDs) IETF RFC Published https://www.ietf.org/rfc/rfc9562.pdf Yes
RFC 9682 RFC 9682 - Updates to the Concise Data Definition Language (CDDL) Grammar IETF RFC Published https://www.rfc-editor.org/rfc/rfc9682.pdf Yes
RFC 9901 RFC 9901 - Selective Disclosure for JSON Web Tokens IETF RFC Published https://datatracker.ietf.org/doc/rfc9901 Yes Y
SD-JWT-VC SD-JWT-based Verifiable Credentials (SD-JWT VC) IETF RFC draft-ietf-oauth-sd-jwt-vc-13 Draft https://datatracker.ietf.org/doc/draft-ietf-oauth-sd-jwt-vc/ Yes Credential format supporting selective disclosure Y
Client authentication OAuth 2.0 Attestation-Based Client Authentication IETF RFC draft-ietf-oauth-attestation-based-client-auth-07 Draft https://datatracker.ietf.org/doc/draft-ietf-oauth-attestation-based-client-auth/ Yes Client authentication Y
Oauth 2.1 The OAuth 2.1 Authorization Framework IETF RFC draft-ietf-oauth-v2-1-14 Draft https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/ No Y Y
Token Status List Token Status List (TSL) IETF RFC draft-ietf-oauth-status-list-17 Draft https://datatracker.ietf.org/doc/draft-ietf-oauth-status-list/ Yes Useful for revocation/suspension Y Y
18013-5 Personal identification — ISO-compliant
driving licence
Part 5: Mobile
driving licence (mDL) application
ISO/IEC IS 2021 Published Yes mdoc concept
Proximity use case
Y Y Y Y
18013-5 Personal identification — ISO-compliant
driving licence
Part 5: Mobile
driving licence (mDL) application
ISO/IEC IS Ed2 Draft (DIS) Yes mdoc concept
Proximity use case
Y Y Y Y
18013-7 Personal identification — ISO-compliant
driving licence
Part 7: Mobile
driving licence (mDL) add-on functions
ISO/IEC TS 2025 Published Yes mdoc concept
Online use case
Y Y Y Y
18013-7 Personal identification — ISO-compliant
driving licence
Part 7: Mobile
driving licence (mDL) add-on functions
ISO/IEC TS Ed2 Draft (DTS) Yes? mdoc concept
Online use case
Y Y Y Y
23220-1 Cards and security devices for personal
identification — Building blocks for
identity management via mobile
devices
Part 1: Generic system
architectures of mobile eID systems
ISO/IEC TS 2023 Published No Y Y Y Y
23220-2 Cards and security devices for personal
identification — Building blocks for
identity management via mobile
devicesPart 2: Data objects and encoding
rules for generic eID systems
ISO/IEC TS 2024 Published Yes Y
23220-3 Cards and security devices for personal
identification — Building blocks for
identity management via mobile
devices
Part 3: Protocols and
services for installation and issuing
phase
ISO/IEC TS Draft (DTS) Yes Y
23220-4 Cards and security devices for personal
identification — Building blocks for
identity management via mobile
devices
Part 4: Protocols and
services for operational phase
ISO/IEC TS Draft (DTS) Yes Y Y Y
23220-5 Cards and security devices for personal
identification - Building blocks for
identity management via mobile devices;
Part 5: Trust models and confidence
level assessment
ISO/IEC TS Draft Yes Y
23220-7 Cards and security devices for personal
identification — Building blocks for
identity management via mobile devices,
Part 7: Registration Authority
Procedures for Mobile Document
ISO/IEC Draft Yes Y
7367-2 Personal identification — mdoc schemas
Part 2: Mobile vehicle certificate
ISO/IEC TS Draft (DTS) Yes Y
23635 Blockchain and distributed ledger technologies — Guidelines for governance ISO/IEC TS 2022 Published Yes DLT/Blockchain trust model is not considered for the moment for APTITUDE
23257 Blockchain and distributed ledger technologies — Reference architecture ISO/IEC IS 2022 Published Yes DLT/Blockchain trust model is not considered for the moment for APTITUDE
15000-3 Electronic business eXtensible Markup
Language (ebXML) Part 3: Registry and
repository
ISO IS 2023 Published Yes
CSC API CSC API version 2.2.0.0 - Architectures
and protocols for remote signature
applications
CSC 2.2.0.0 Published https://cloudsignatureconsortium.org/resources/csc-api-v2-2/ Yes Applicable for electronic signature
CSC Data model CSC API Data Model for remote signature applications, V 1.0.0 CSC 1.0.0 Published https://cloudsignatureconsortium.org/wp-content/uploads/2025/10/csc-dm.pdf
https://cloudsignatureconsortium.org/resources/download-api-specifications/
Yes Applicable for electronic signature
CSC Data model bindings CSC Data Model Bindings – version 1.0.0 CSC 1.0.0 Published https://cloudsignatureconsortium.org/wp-content/uploads/2025/10/data-model-bindings.pdf
https://cloudsignatureconsortium.org/resources/download-api-specifications/
Yes Applicable for electronic signature

Note: For the complete table of standards and specifications, refer to the relevant-standards.md file in the repository documentation folder.