SEREEEE IS == 12 ;I)Iltlfl I A R nl! ;;:— =‘l = 41

KERI is a new approach to decentralized identifiers and decentralized key management that promises significant benefits for SSI (self-sovereign identity) and TolP (Trust over IP) infrastructure e

KER!I is being developed and standardized in the Identifiers &

Discovery Working Group at the Decentralized Identity Foundation https://identity.foundation/working- groups/identifiers-discovery.html e

I learned this while . helping KERI inventor Self—%oi/j;i;%n Dr. Sam Smith write a ~ 4

book chapter about MEAP

KERI and decentralized / ‘\"-“ key management 7

| volunteered to host this session to make these basic concepts accessible to anyone at IIW who wants to get the basic idea D

Although the full technical architecture of KERI goes very deep (140 pages deep), the basic ideas are surprisingly straightforward e

e First, a little background from Sam and Timothy Ruff e Then 7 minutes for each of the 7 concepts

o 3 minutes to explain the basic idea

o 4 minutes for Sam to answer Q's about that slide o A few more minutes for any additional questions o Close with a quick summary of next steps for KERI

Meet KERI inventor Dr. Sam Smith

Meet Sam'’s partner in Digital Trust Ventures, Timothy Ruff

SEREEEE IS == 12 ;I)Iltlfl I A R nl! ;;:— =‘l = 41

Caveat: all of this depends on one fundamental concept: public and private keys 2 = Public key— MUST Cryptographic Private key— MUST be shared binding NOT be shared

1: Self-Certifying Identifiers

A self-certifying identifier (SCID) is a identifier that can be proven to be the one and only identifier tied to a public key using cryptography alone* *No blockchain needed D

keri:21tD S P mome = GgKbJNHYp : Cryptographic Self-certifying Public k tplie key binding identifier

entropy 4 captures v \ | controller | D generates derives verifies o Y N ) key-pair < binding <~ identifier | self-certifying

Benefit #1

2: Self-Certifying Key Event Logs

Each time you change (“rotate”) your public/private key pair, KERI writes a new digitally-signed message to a log file so you can prove you made the change e

1 ) f \ @ccounhng ;@edger 2) /Q ’7: 3) f / 4) /O Rotated public keys

Key Event Message

s m Key Event Message

on s et ot Py Key Event Message

sn ot o0 et | e conpton st |

Benefit #2

3: Witnesses for Key Event Logs

You can keep your own copy of your KERI key event log, but you can also have other witnesses keep and digitally sign their own copies e

N /'/ ; , ‘/«“ , ‘- R | p—— ‘ — N 74 y Mt — ‘w“—d 7/,;&4}///4/’ H“(‘,",‘:“/z ey Hat | ‘,&L,,/«/fi # il Hibely € Duis | == e, his /M- _ duy of Ocsober, 2008, e f o [r————y 72

Al key events signed by All key events signed by Controller Controller and Witness Controller Witness Key Event Log Key Event Log Key event message R Dl N Key event message ) oeemmesr ) Key event message | Kevewentmessage Key event message | Kevewentmessaee Key event message | ‘e/eemmesae of