AP2 Cryptographic Signing
Implements secure, hardware-backed cryptographic signing and verification for AP2 protocol transactions and verifiable digital credentials.
This skill enables developers to implement the cryptographic core of the AP2 (Agentic Payments 2) protocol, ensuring non-repudiation and integrity for Verifiable Digital Credentials (VDCs). It provides standardized patterns for hardware-backed user signatures, merchant-level entity signatures, and RFC 8785 JSON Canonicalization (JCS). By providing structured guidance for SD-JWT with Key Binding and Detached JWS formats, this skill ensures that agentic commerce transactions are secure, tamper-proof, and fully compliant with AP2 security mandates and attestation requirements.
Key Features
01Hardware-backed user signature implementation using TPM/Secure Enclave patterns
02RFC 8785 compliant JSON Canonicalization for deterministic signing
03Support for SD-JWT with Key Binding (+kb) and Detached JWS formats
04Merchant entity-level key management and fulfillment guarantee workflows
0532 GitHub stars
06Cryptographic attestation verification for secure transaction contexts
Use Cases
01Integrating biometric-backed transaction signing into shopping agents
02Building secure checkout flows for autonomous agentic commerce platforms
03Implementing non-repudiation layers for merchant-agent transaction mandates