Skip to navigation
Diagrams

DIDComm v2 Envelope

View as Markdown

Used in: §7.6 Encryption & Authentication Audience: Agent Operator, Backend Developer IA ID: D15

Plaintext message { id, type,body, from, to, thid } Signed JWS (sender DID key) Encrypted JWE (anoncrypt or authcrypt) Forward envelope to mediator Mediator unwraps forward → relays JWE Recipient JWE decrypt → JWSverify → plaintext

Reading guide: Two crypto layers: signature (authenticity) → encryption (confidentiality). A forward envelope adds a routing layer for mediator delivery.