The SIROS Foundation maintains and contributes to a variety of open source projects that form the foundation of the SIROS ID platform. All projects are hosted on GitHub under the sirosfoundation organization.
These are the core components that power the SIROS ID platform.
Credential Issuer & Verifier
| Repository | Description |
|---|
| SUNET/vc | The core credential issuer and verifier implementation. Supports OID4VCI, OID4VP, SD-JWT VC, and mDL/mDoc formats. |
Wallet Backend
| Repository | Description |
|---|
| go-wallet-backend | Go-based wallet backend service providing API endpoints for the SIROS ID Credential Manager. Handles credential storage, key management, and protocol flows. |
Trust Services
| Repository | Description |
|---|
| go-trust | AuthZEN-based Policy Decision Point (PDP) for trust evaluation. Supports ETSI Trust Lists (TSL), OpenID Federation, and DID resolution. |
| goFF | go Federation Feeder: a Go reimplementation of pyFF, the SAML metadata processing pipeline engine used by identity federations. Runs pyFF-style pipeline YAML and serves metadata, including over MDQ. |
| g119612 | Go implementation of ETSI TS 119 612 (Trust Status Lists) and TS 119 602 (Lists of Trusted Entities). Provides tsl-tool for generating, validating, converting, and publishing trust lists. |
| trust-lists | Published trust lists for the SIROS ecosystem. Source data and pipelines deployed to trust.siros.org. |
Credential Type Registry
See Registry Services for full documentation on how the registry fits into the wallet ecosystem.
| Repository | Description |
|---|
| registry-cli | CLI tool for building TS11-compliant Catalogue of Attestations sites. Discovers VCTMs from GitHub repos and generates static sites with JSON APIs. Documentation → |
| registry.siros.org | Aggregated Verifiable Credential Type Metadata (VCTM) registry. Provides credential type definitions, display templates, and claim schemas. |
Infrastructure & DevOps
Libraries & Utilities
| Repository | Description |
|---|
| go-cryptoutil | Cryptographic utilities for Go including key management, signing, and verification helpers. |
| go-spocp | Go implementation of SPOCP (Simple Policy Control Protocol). |
| go-r2ps-service | Server implementation of R2PS (Remote Two-Factor Protected Services) for remote WSCA/WSCD roles: hardware-backed key generation and signing via PKCS#11, with OPAQUE and FIDO2 authentication, and wallet/key attestation issuance (WIA/WKA). Roles are selected with R2PS_MODE. |
Demo & Testing
| Repository | Description |
|---|
| demo-credentials | Sample credentials and VCTM definitions for testing and demonstration. |
| facetec-api | FaceTec integration API for biometric verification. |
Native Mobile SDKs
| Repository | Description |
|---|
| siros-sdk-kotlin | Native Android SDK (Kotlin 2.1+, Android SDK 28+). Modular architecture: WMP transport, WebAuthn/passkey auth with PRF key derivation, JWE-encrypted keystore, OID4VCI/OID4VP flow orchestration, and credential storage. Includes a sample app. |
| siros-sdk-swift | Native iOS/macOS SDK (Swift 5.10+, iOS 16+/macOS 13+). Modules: WMP transport, passkey auth, JWE keystore with HKDF derivation, OID4VCI/OID4VP flows, DCQL matching, and a top-level SirosWallet API combining all modules. |
Both SDKs connect to the same wallet backend infrastructure (go-wallet-backend) via the Wallet Messaging Protocol (WMP) and can be embedded into existing native applications. See WSCA/WSCD Architecture for how the SDKs integrate with the siros-wscd-manager key management layer.
| Repository | Description |
|---|
| go-wmp | Go library for the Wallet Messaging Protocol (WMP), a JSON-RPC 2.0 based multi-party messaging protocol with optional MLS end-to-end encryption. |
| siros-wscd-manager | Pluggable WSCD key management layer (software keys, R2PS, FIDO2) with native and WASM bindings. See WSCA/WSCD Architecture. |
| siros-verifier-cli | Command-line ISO/IEC 18013-5 BLE proximity verifier for debugging mdoc device retrieval. |
| siros-conformance | Conformance test orchestration. See Running Conformance Tests. |
| siros-wrpac-tool | Access CA and Registrar for EUDI wallet-relying party access (WRPAC) and registration (WRPRC) certificates. |
| siros-status-service | Standalone status list service for digital credentials (draft-ietf-oauth-status-list). |
Browser & Web Integration
| Repository | Description |
|---|
| wallet-companion | Browser extension for web wallets with standards-based credential flows, auto-registration and protocol-aware routing. |
wwWallet Project
The SIROS ID Credential Manager is based on the wwWallet open source project—a collaborative effort to create a flexible, standards-compliant digital credential wallet.
Project Origin
The wwWallet project was established as an open source collaboration to build a modern digital credential manager supporting the emerging EU Digital Identity Wallet (EUDIW) ecosystem. The project is sponsored by SIROS Foundation with key contributions from:
- GUNet – Greek Universities Network
- SURF – Dutch research and education network
- Yubico – Hardware security key manufacturer
- SUNET – Swedish University Network
wwWallet Repositories
The wwWallet project consists of several components:
SIROS ID Enhancements
The SIROS ID Credential Manager is based on wwWallet but includes significant enhancements that go beyond the original implementation:
- Passkey-based authentication – Using FIDO2/WebAuthn for passwordless wallet access
- Enhanced security architecture – Hardware-backed key storage via Wallet Secure Cryptographic Device (WSCD)
- Multi-tenant hosting – Scalable deployment for multiple organizations
- Trust framework integration – Connection to SIROS Trust Services
- Extended protocol support – Additional credential formats and verification flows
- Identity binding – OIDC-based identity verification for high-assurance scenarios
- Go-based backend – High-performance backend rewritten in Go for improved scalability
SIROS Foundation also contributes to and maintains forks of related open source projects:
Release Notes
Per-release notes are published for components that opt in, generated from each repository's own RELEASE_NOTES.md.
Documentation
| Repository | Description |
|---|
| docs | This documentation site (you're reading it now). |
Contributing
We welcome contributions to all SIROS Foundation projects. Each repository contains contribution guidelines in its README or CONTRIBUTING file.
- Report issues: Use GitHub Issues on the relevant repository
- Submit changes: Fork, branch, and submit a Pull Request
- Discuss: Join discussions in GitHub Discussions or reach out via support@siros.org
License
Most SIROS Foundation projects are released under the Apache 2.0, MIT or BSD-2-Clause license. See individual repository LICENSE files for details.