DIDComm

Protocolo de Identidade

Specification for secure, asynchronous, end-to-end encrypted messaging between parties identified by Decentralized Identifiers (DIDs). Defines envelope formats, encryption, signing, threading, transport-independence, and protocol-on-protocol patterns — anything party-to-party that needs DID-rooted authentication and confidentiality can be expressed as a DIDComm protocol. Higher-order protocols (issue-credential, present-proof, etc.) inherit DIDComms security, privacy, decentralization, and transport independence. Works over any transport: HTTP, BlueTooth, SMTP, raw sockets, etc.

Comunidade
Links
Visitar Website Sugerir uma correção

Detalhes

Licença Spec: Apache 2.0; multiple independent implementations (didcomm-rs, didcomm-jvm, didcomm-python, walt.id, SpruceID, Aries family)
Status de Dev 🟢 Ativo
Detalhe do Status de Dev Released — DIDComm v2 reached DIF Approved Spec status July 2022; v2.1 in production
Proprietário Decentralized Identity Foundation (DIF) — non-profit standards body; spec maintained by the DIDComm Messaging Working Group
Órgão de Governança DIF (DIDComm Messaging Working Group)
País International (DIF: USA-incorporated, global membership)
Ano de Início 2019
Stack Specification only (no canonical implementation stack); reference implementations in Rust (didcomm-rs by DIF), Python, TypeScript/JavaScript, Java, Go, Swift
Financiamento DIF (member-funded standards body)
Última Investigação 1 de jul. de 2026

Domínios de Caso de Uso

Identidade e Confiança

Capacidades

Criptografado de ponta a ponta Identidade soberana

Protocolo de Identidade Atributos

Origens Hyperledger Aries community (DIDComm v1); DIF migration and v2 redesign 2020-2022
Banco de Dados N/A — specification is a transport-layer messaging protocol; persistence is implementation concern (typically wallet-side encrypted message stores)
Linguagem de Consulta N/A — DIDComm is asynchronous message passing; query patterns are implemented as application-layer protocols (e.g., discover-features, basic-message) running over DIDComm
Formatos de Dados JWE (JSON Web Encryption) + JWS (JSON Web Signature) wrappers; JSON message bodies
Suporte Móvel Yes (transport-agnostic; multiple mobile SDKs and wallet implementations)
Suporte Web Yes (HTTPS transport)
Aplicativos Nativos Yes (Bluetooth, raw sockets, push-notification mediator patterns)
Termos Open standard, free to implement; DIF IPR protections require working group membership for normative contributions
Fundos Unknown — DIF working group funded by member dues and member-organization staff time; reference implementations developed by member organizations on their own funding (Indicio, Anonyome, Mattr, walt.id) without a published per-spec budget
Baseado Em W3C Decentralized Identifiers (DIDs); JOSE (JWE/JWS); IETF cryptographic primitives
Permissões Implementation-defined at the DIDComm layer — DIDComm itself does not specify authorization model; subprotocols (issue-credential, present-proof, etc.) define their own permission semantics, and trust is rooted in DIDs of communicating parties
Autenticação e Identidade DID-rooted — sender and recipient identified by DIDs whose keys are used for signing and encryption
Modelo de Armazenamento Stateless protocol — no message persistence at the protocol layer; mediators may queue messages for offline recipients
Interoperabilidade Multiple independent implementations (Aries, walt.id, SpruceID, didcomm-rs); transport-independent
Portabilidade de Dados High — messages are self-contained signed/encrypted artifacts portable across transports; mediator handoff supported; relationships portable across device changes via key rotation (from_prior JWT)
Governança e Tomada de Decisão DIF DIDComm Working Group governance — open meetings (Mondays 12pm PST), IPR-protected contributions under DIF membership, consensus-driven specification process; chartered January 2020 building on Hyperledger Aries community work; aligns with W3C, IETF, and Aries communities
Maturidade / Padronização do Protocolo DIF Approved Spec (v2 since July 2022); v2.1 current; production deployments in government, travel, and enterprise
Padrões de Identidade W3C DIDs; W3C VCs (commonly carried as DIDComm payloads); DIF DIDComm v2.1
Métodos DID Suportados Any DID method — DIDComm is method-agnostic (did:key, did:web, did:peer, did:ion, did:indy, etc.)
Gestão de Chaves Per DID method; DIDComm uses keys from DID documents for signing/encryption
Tipos de Credenciais Transport for any credential format (W3C VC, AnonCreds, mDoc, etc.); not credential-format-specific
Método de Verificação JWS signatures verifiable against DID document keys
Recursos de Privacidade Anoncrypt (anonymous encryption hides sender identity); routing through mediators for metadata privacy; per-message ephemeral keys
Métodos de Autenticação Authcrypt (signed + encrypted) and Anoncrypt (anonymous encryption); DID rotation support for relationship lifecycle
Mecanismo de Revogação Per credential format (DIDComm carries revocation messages but does not define revocation semantics); DID rotation for key compromise
Tipos de Agentes Suportados Edge agents (people, IoT), cloud agents, mediators, routing agents — full agent topology supported
Tipos de Carteira/Cliente Mobile wallets, cloud agents, web wallets; reference implementations in Rust, JavaScript, Python, JVM, .NET
Mecanismos de Recuperação Relationship-level rotation via from_prior JWT mechanism (rotate sender DID and re-establish thread continuity); credential-level recovery handled by carried credential protocols rather than DIDComm itself
Conformidade / Regulamentações Used in eIDAS, GDPR, and similar regulatory contexts as the secure communication layer underneath verifiable credential exchange; deployed in EUDI Wallet implementations and Indy/Aries deployments in government identity programs
Protocolos de Troca de Credenciais Issue Credential v2, Present Proof v2, Out-of-Band, DID Exchange — all DIDComm sub-protocols
Estrutura de Confiança Transport-agnostic — works under any trust framework (eIDAS 2.0, TOIP, etc.); used in BC Government, US DHS SVIP, IATA travel, IDUnion
Modelo de Custo Free — open standard, royalty-free under DIF IPR policy; implementation cost limited to chosen libraries and infrastructure
Resistência à Censura High — works over any transport including SMTP, Bluetooth, sneakernet; no required server