Aries RFC 0114: Predefined Identities

Authors: Daniel Hardman
Status: PROPOSED
Since: 2019-07-10
Status Note: (explanation of current status; if adopted, links to impls or derivative ideas; if superseded, link to replacement)
Start Date: 2019-07-10
Tags: feature

Summary

Documents some keys, DIDs, and DID Docs that may be useful for testing, simulation, and spec writing. The fake ones are the DIDComm / identity analogs to the reserved domain "example.com" that was allocated for testing purposes with DNS and other internet systems -- or to Microsoft's example Contoso database and website used to explore and document web development concepts.

Real Identities

The following real--NOT fake--identities are worth publicly documenting.

Aries community

The collective Aries developer community is represented by:

did:sov:BzCbsNYhMrjHiqZDTUASHg -- verkey = 6zJ9dboyug451A8dtLgsjmjyguQcmq823y7vHP6vT2Eu

This DID is currently allocated, but not actually registered on Sovrin's mainnet. You will see this DID in a number of RFCs, as the basis of a PIURI that identifies a community-defined protocol. You DO NOT have to actually resolve this DID or relate to a Sovrin identity to use Aries or its RFCs; think of this more like the opaque URNs that are sometimes used in XML namespacing. At some point it may be registered, but nothing else in the preceding summary will change.

The community controls a second DID that is useful for defining message families that are not canonical (e.g., in the sample tic-tac-toe protocol). It is:

did:sov:SLfEi9esrjzybysFxQZbfq -- verkey = Ep1puxjTDREwEyz91RYzn7arKL2iKQaDEB5kYDUUUwh5

This community may create DIDs for itself from other DID methods, too. If so, we will publish them here.

Subgroups

The Aries community may create subgroups with their own DIDs. If so, we may publish such information here.

Allied communities

Other groups such as DIF, the W3C Crecentials Community Group, and so forth may wish to define identities and announce their associated DIDs here.

Fake Identities

The identity material shown below is not registered anywhere. This is because sometimes our tests or demos are about registering or connecting, and because the identity material is intended to be somewhat independent of a specific blockchain instance. Instead, we define values and give them names, permalinks, and semantics in this RFC. This lets us have a shared understanding of how we expect them to behave in various contexts.

WARNING: Below you will see some published secrets. By disclosing private keys and/or their seeds, we are compromising the keypairs. This fake identity material is thus NOT trustworthy for anything; the world knows the secrets, and now you do, too. :-) You can test or simulate workflows with these keys. You might use them in debugging and development. But you should never use them as the basis of real trust.

DIDs

alice-sov-1

This DID, the alice-sov-1 DID with value did:sov:UrDaZsMUpa91DqU3vrGmoJ, is associated with a very simplistic Indy/Sovrin identity. It has a single keypair (Key 1 below) that it uses for everything. In demos or tests, its genesis DID Doc looks like this:

{
    "@context": "https://w3id.org/did/v0.11",
    "id": "did:sov:UrDaZsMUpa91DqU3vrGmoJ",
    "service": [{
        "type": "did-communication",
        "serviceEndpoint": "https://localhost:23456"
    }],
    "publicKey": [{
        "id": "#key-1",
        "type": "Ed25519VerificationKey2018",
        "publicKeyBase58": "GBMBzuhw7XgSdbNffh8HpoKWEdEN6hU2Q5WqL1KQTG5Z"
    }],
    "authentication": ["#key-1"]
}

bob-many-1

This DID, the bob-many-1 DID with value did:sov:T9nQQ8CjAhk2oGAgAw1ToF, is associated with a much more flexible, complex identity than alice-sov-1. It places every test keypair except Key 1 in the authentication section of its DID Doc. This means you should be able to talk to Bob using the types of crypto common in many communities, not just Indy/Sovrin. Its genesis DID doc looks like this:

{
    "@context": "https://w3id.org/did/v0.11",
    "id": "did:sov:T9nQQ8CjAhk2oGAgAw1ToF",
    "service": [{
        "type": "did-communication",
        "serviceEndpoint": "https://localhost:23457"
    }],
    "publicKey": [{
        "id": "#key-2",
        "type": "Ed25519VerificationKey2018",
        "controller": "#id",
        "publicKeyBase58": "FFhViHkJwqA15ruKmHQUoZYtc5ZkddozN3tSjETrUH9z"
      },
      {
        "id": "#key-3",
        "type": "Secp256k1VerificationKey2018",
        "controller": "#id",
        "publicKeyHex": "3056301006072a8648ce3d020106052b8104000a03420004a34521c8191d625ff811c82a24a60ff9f174c8b17a7550c11bba35dbf97f3f04392e6a9c6353fd07987e016122157bf56c487865036722e4a978bb6cd8843fa8"
      },
      {
        "id": "#key-4",
        "type": "RsaVerificationKey2018",
        "controller": "#id",
        "publicKeyPem": "-----BEGIN PUBLIC KEY-----\r\nMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDlOJu6TyygqxfWT7eLtGDwajtN\r\nFOb9I5XRb6khyfD1Yt3YiCgQWMNW649887VGJiGr/L5i2osbl8C9+WJTeucF+S76\r\nxFxdU6jE0NQ+Z+zEdhUTooNRaY5nZiu5PgDB0ED/ZKBUSLKL7eibMxZtMlUDHjm4\r\ngwQco1KRMDSmXSMkDwIDAQAB\r\n-----END PUBLIC KEY-----"
      },
      {
        "id": "#key-5",
        "type": "RsaVerificationKey2018",
        "controller": "#id",
        "publicKeyPem": "-----BEGIN PUBLIC KEY-----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\r\n1uiCSY19UWe5LQhIMbR0u/0CAwEAAQ==\r\n-----END PUBLIC KEY-----"
      },
    ],
    "authentication": ["#key-2", "#key-3", "#key-4", "#key-5", "#key-6"]
}

[TODO: define DIDs from other ecosystems that put the same set of keys in their DID docs -- maybe bob-many-2 is a did:eth using these same keys, and bob-many-3 is a did:btc using them...]

Keys

Key 1 (Ed25519)

This key is used by the alice-sov-1 DID, but could also be used with other DIDs defined elsewhere.

signing key (private)
Ga3v3SyNsvv1QhSCrEAQfJiyxQYUdZzQARkCosSWrXbT

hex seed (private; in a form usable by Indy CLI)
e756c41c1b5c48d3be0f7b5c7aa576d2709f13b67c9078c7ded047fe87c8a79e

verkey (public)
GBMBzuhw7XgSdbNffh8HpoKWEdEN6hU2Q5WqL1KQTG5Z

as a Sovrin DID
did:sov:UrDaZsMUpa91DqU3vrGmoJ