Standards and technologies.
Gankpo relies on open standards and documents their role in its formats, cryptographic mechanisms and identity journeys.
Cryptographic primitives
The primitives used by the gkp_core engine are aligned with the reference algorithms published by IETF, NIST, and the cryptographic community.
| Primitive | Reference standard | Use in Gankpo |
|---|---|---|
| Ed25519 | RFC 8032 | Publisher and document signing |
| ECDSA P-256 | RFC 6979 / SEC 1 (NIST P-256 curve) | COSE_Sign1 signing of QR credentials |
| ECDSA P-384 | SEC 1 (NIST P-384 curve) | Optional high-level signing |
| RSA (PKCS#1 v2.2) | RFC 8017 | Interoperability with existing PKI |
| X25519 | RFC 7748 | Key exchange |
| AES-256-GCM | NIST SP 800-38D | Authenticated encryption of payloads |
| ChaCha20-Poly1305 | RFC 8439 | Authenticated encryption on mobile |
| BLAKE3 | BLAKE3 specification | Integrity fingerprints |
| SHA-256 / SHA-384 | RFC 6234 | Interoperability fingerprints |
| HKDF-SHA-256 | RFC 5869 | Key derivation |
| HMAC-SHA-256 | RFC 2104 | Message authentication |
| Argon2id | RFC 9106 | Key derivation from user secrets |
Certificate and message formats
| Standard | Status in Gankpo |
|---|---|
| X.509 v3 | Parsing and validation of certificate chains |
| PKCS#7 / CMS (RFC 5652) | Read support for interoperability |
| OCSP (RFC 6960) | Revocation verification |
| COSE (RFC 8152) | Signing of GKP1 QR credentials |
| CBOR (RFC 8949) | Canonical encoding of manifests |
| Base45 (RFC 9285) | QR payload encoding |
Signature and identity
| Area | Status |
|---|---|
| eIDAS | Regulatory reference considered for relevant use cases. No AdES/QES qualification or eIDAS certification is presented as obtained. |
| ISO/IEC 18013-5:2021 (mDL) | Technical reference for mobile documents. No ISO 18013-5 certification is claimed. |
| W3C Verifiable Credentials | Reference data model for relevant verifiable-credential use cases. |
| OpenID4VCI / OpenID4VP | Reference protocols for issuance and presentation journeys. No OpenID certification is claimed without an official award. |
| SD-JWT | Format considered for selective disclosure in relevant journeys. |
Qualification and certification status
Using a standard does not constitute certification. Gankpo does not present any eIDAS qualification, ISO 27001, Common Criteria, QES or OpenID certification as obtained until official evidence of award is published.
Reproducibility
An official binary conformance vector package must identify the specification version, inputs, expected outputs and its fingerprint. No public vector package is currently distributed from this site.
Read the technical documentation.
Formats, RFCs, implementation modules: everything needed to audit or integrate.