Quiz Entry - updated: 2026.10.22
Which technologies did Switzerland choose for the initial implementation of the E-ID?
SD-JWT as credential format, ECDSA on NIST P-256 for signatures, hardware-based holder binding where the phone supports it (otherwise software), DID documents as identifiers, the Token Status List for revocation, OpenID4VCI/OpenID4VP as communication protocols, and a trust protocol based on VCs.
| Category | Choice | What it does |
|---|---|---|
| Credential format | SD-JWT | JWT-based credential with selective disclosure via salted hashes |
| Signature scheme | ECDSA, NIST P-256 | Widely supported elliptic-curve signature, available in phone secure hardware |
| Hardware-based binding | Yes, if the smartphone supports it, otherwise software-based | Key kept in the phone's secure element / enclave |
| Identifiers | DID documents | Issuers and verifiers are identified by DIDs resolved via the register |
| Revocation | Token Status List | A signed, compressed bit list; one bit per credential says whether it is revoked |
| Communication | OpenID4VCI / OpenID4VP | OpenID protocols for issuing credentials to a wallet and requesting presentations from it |
| Trust | Trust protocol based on VCs | Trust statements about issuers and verifiers are themselves verifiable credentials |
The common thread is mature, widely deployed building blocks (JWT, ECDSA, OpenID) over the most privacy-preserving options, which is why the result has selective disclosure but not unlinkability.
Go deeper:
swiyu technical documentation — the current technical stack of the Swiss trust infrastructure.- Elliptic Curve Digital Signature Algorithm (Wikipedia) — how ECDSA signs, and why its signatures are a stable value.