SecAppDev Academy

SecAppDev original

Verifiable Credentials: Concepts to Practice

Video and handoutsSecAppDev 2025

Identity

Abstract

This session introduces the core concepts of Verifiable Credentials (VCs) with a focus on OpenID for Verifiable Credentials (OpenID4VC) protocols, main credential formats (ISO mdoc and IETF SD-JWT VC). We’ll explore real-world use cases, key implementation lessons, and the role of interoperability profiles in enabling secure and scalable deployments. The talk also includes highlights challenges and design decisions across the identity tech stack and updates to different specifications driven by implementation feedback.

Handouts available for this lecture

Download

Chapters

  1. Introduction and agenda
  2. Benefits of verifiable credentials
  3. Global adoption and wallet use cases
  4. Technical standards stack overview
  5. Demo: presenting a German PID credential
  6. Protocol layer and OpenID4VC design choices
  7. OpenID4VP presentation flow and DCQL
  8. Digital Credentials API and browser integration
  9. OpenID4VCI credential issuance flow
  10. Pre-authorized and deferred issuance
  11. HAIP interoperability profile
  12. SD-JWT and SD-JWT VC credential formats
  13. Batch issuance, key attestations, and unlinkability
  14. Wrap-up and Q&A

In-person course

Kristina Yasuda taught at a previous edition of SecAppDev

SecAppDev is an immersive course in secure application development, running annually since 2005. World-renowned faculty from industry and academia deliver in-depth 90-minute lectures and full-day workshops in an intimate setting, typically in early June.

More about SecAppDev

Regular updates, at most twice a month

We will email you about new talks on the SecAppDev Academy, along with updates on the annual in-person course. No tracking, and you can unsubscribe at any time.