privacybydesign/irma-demo-schememanager

irma-demo scheme manager

The irma-demo scheme manager

This repository contains the credential definitions, issuer information, and their public and private keys of the irma-demo scheme manager.

CAREFUL! This scheme manager is only ever meant to be used for development, demoing and experimenting! Because the issuer private keys are included in this repository everyone can issue any credential from this scheme manager, choosing the attributes freely. Thus their authenticity cannot be trusted. (For an actual scheme manager, see the Privacy by Design Foundation scheme manager.)

Use this repository by putting it in the irma_configuration folder of your project (for example, the IRMA mobile app or the IRMA API server). Be sure to call the folder irma-demo! E.g.,

git clone https://github.com/privacybydesign/irma-demo-schememanager irma-demo

Directory structure

A scheme manager, issuer, or credential type (call it an entity) is always stored in description.xml, contained in a folder whose name must be that of the entity as specified by the xml file. Multiple issuers are grouped under the scheme manager, and each issuer may issue multiple credential types.

SchemeManager
+-- IssuerName
|   +-- Issues
|   |   +-- CredentialName
|   |       +--- description.xml
|   |       +--- logo.png
|   +-- PublicKeys
|   |   +-- 0.xml
|   |   +-- 1.xml
|   +-- PrivateKeys (need not be present)
|   |   +-- 0.xml
|   |   +-- 1.xml
|   +-- description.xml
|   +-- logo.png
+-- description.xml
+-- index
+-- index.sig
+-- pk.pem
+-- timestamp

Some notes on adding a new organization

First setup up the description.xml files of the scheme manager, issuers, and the credentials types that fall under your scheme manager, laying out the files as above. Make sure you add logos for your issuers and credential types.

Idemix public-private keypairs can be generated using the irma command from irmago. Be sure to put the keys in the correct place in the directory tree. The default options should be ok for most situations. For example:

irma scheme issuer keygen path/to/issuer/directory

The index file must contain the SHA256-hash of each file along with its location in the directory tree; the index.sig file must contain an ECDSA signature over this file (which thus effectively signs the entire directory tree), and the public key of this signature must be in pk.pem. The IRMA app verifies this signature when starting and when downloading new scheme manager files, and will refuse to use the entire scheme manager when this signature verification fails. You can use the scheme subcommand of the irma command from the irmago repository to generate an ECDSA private-public keypair, the index file, and the index.sig signature file.

Note

This repository contains the same tree as (the now deprecated) github.com/credentials/irma_configuration but with the outer irma_configuration folder removed.

irma-demo-schememanager's Issues

Issue Demo KVK credentials

@michielmayer I believe this is relevant for you.

When issuing demo credentials via the organisatiegegevens.signicat.dev there are 2 problems:

• When trying to issue KVK credentials with an empty demo persoonsgegevens there is an infinite loop in step 2 of the KVK. See screenprints;
  
  
• When trying to issue KVK credentials with a random populated demo persoonsgegevens you get to step 3 'vind je bedrijf' where you can search on KVK nummer or handelsnaam. No entry gives any results and you are therefore unable to proceed.
  

Cannot alter credentials attributes

Hello,

I am trying to play a bit with irma-demo-schememanager. I am trying to change something inside the MijnOverheid credentials (i.e. logo.png or attributes fields names for example), but it remains unchanged.

irma_demo_schememanager is installed on ${HOME_GO} location:

/Users/vn/go/src/github.com/privacybydesign/irma_mobile/irma_configuration/irma-demo

And 'shared' between keyshare_server and irma_api_server through the symbolic links:

irma_keyshare_server/src/main/resources:
config.json
irma_configuration -> /Users/vn/go/src/github.com/privacybydesign/irma_mobile/irma_configuration
database.xml
logback.xml
pk.der
pk.pem
sk.der

irma_api_server/src/main/resources
config.json
logback.xml
irma_configuration -> /Users/vn/go/src/github.com/privacybydesign/irma_mobile/irma_configuration

I was able to download application container from my iPhone with Xcode and see that all data related to the credentials is in the initial state, not changed...

How attributes forms on mobile phone application? From the local scheme manager or every time downloading from somewhere?

Key generation

Hi,
Is there a way to generate credentials directly in Java without irmatool or silvia_keygen?
Thank you,
Ricardo

Credential irma-demo.discipl.demoBRI no longer works?

Created test credentials a while ago for demonstration purposes. Attempt to reuse it just now does not work. What am I doing wrong?

The credentials requested: https://privacybydesign.foundation/attribute-index/en/irma-demo.discipl.demoBRI.html
The response: