BBS Cryptosuite CRISIS: 4 Out of 5 Providers FAILED This Critical Test!
BBS cryptosuite implementation shows strong core functionality but critical error handling flaws threaten interoperability - providers must fix HTTP status code responses for invalid inputs.
Published on: 9/29/2025, 9:22:01 AM
BBS2023VerifiableCredentialsW3CDataIntegrityCryptosuiteInteroperabilityDigitalIdentityHTTPErrorsVC1.1VC2.0BBSCryptographyStandardsTesting
Key differences:
- Digital Bazaar's company name was updated from 'Digital Bazaar' to 'Digital Bazaar, Inc.' across all test results
- Test execution date moved from September 21, 2025 to September 28, 2025
- Multiple test failures were converted to 'Test skipped' status for Procivis One Core implementation
- Grotto Networking (Netis) continues to fail verification tests due to incorrect HTTP 503 error codes instead of proper 400/422 client error responses
- SpruceID shows verification errors in derived proof testing for both VC 1.1 and VC 2.0
- Critical error handling issues persist where providers return server errors (503) for client input validation failures
news:
The W3C BBS Data Integrity Cryptosuite is an experimental standard for creating and verifying Verifiable Credentials using advanced cryptographic proofs. This interoperability report evaluates multiple technology providers on their ability to issue and verify credentials using the BBS-2023 cryptosuite, which provides selective disclosure capabilities and advanced signature schemes. The standard ensures that digital credentials maintain integrity and can be verified across different implementations while supporting both VC 1.1 and VC 2.0 specifications.
