From 895408188f80637574eac94388d3e79e4b60c4d2 Mon Sep 17 00:00:00 2001
From: Michael Jones <michael_b_jones@hotmail.com>
Date: Sat, 7 Sep 2024 16:46:07 -0700
Subject: [PATCH 1/2] Define entity_statement_signing_alg_values_supported
 metadata parameter

---
 openid-federation-1_0.xml | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/openid-federation-1_0.xml b/openid-federation-1_0.xml
index ba6529c..208c312 100644
--- a/openid-federation-1_0.xml
+++ b/openid-federation-1_0.xml
@@ -466,6 +466,9 @@
           The Entity Statement is signed using one of the private keys of the issuer
           Entity in the form of a <xref target="RFC7515">JSON Web Signature
           (JWS)</xref>.
+	  Signing algorithms supported by the Entity MAY be declared using the
+	  <spanx style="verb">entity_statement_signing_alg_values_supported</spanx>
+	  Federation Entity metadata parameter defined in <xref target="federation_entity"/>.
           Implementations SHOULD support signature verification with
           the RSA SHA-256 algorithm because OpenID Connect Core
           requires support for it (<spanx style="verb">alg</spanx>
@@ -1219,6 +1222,14 @@
           All Federation Entities MAY publish a
 	      <spanx style="verb">federation_historical_keys_endpoint</spanx>.
 	    </t>
+	    <t hangText="entity_statement_signing_alg_values_supported">
+	      <vspace/>
+	      OPTIONAL.
+	      JSON array containing a list of the JWS signing algorithms
+	      (<spanx style="verb">alg</spanx> values)
+	      supported by the Entity to sign Entity Statements.
+	      If omitted, the default value is <spanx style="verb">["RS256"]</spanx>.
+	    </t>
           </list>
         </t>
 	<t>
@@ -1228,7 +1239,7 @@
 	</t>
         <figure>
 	  <preamble>
-	    The following is a non-normative example of the <spanx style="verb">federation_entity</spanx> Entity Type:
+	    The following is a non-normative example of metadata for the <spanx style="verb">federation_entity</spanx> Entity Type:
 	  </preamble>
           <name>
             Example of <spanx style="verb">federation_entity</spanx> Entity Type
@@ -1241,6 +1252,10 @@
     "https://amanita.caesarea.example.com/federation_list",
   "federation_trust_mark_status_endpoint": "https://amanita.caesarea.example.com/status",
   "federation_trust_mark_list_endpoint": "https://amanita.caesarea.example.com/trust_marked_list",
+  "entity_statement_signing_alg_values_supported": [
+    "ES256",
+    "RS256"
+  ],
   "organization_name": "Ovulo Mushroom",
   "homepage_uri": "https://amanita.caesarea.example.com"
 }
@@ -5247,6 +5262,10 @@ Content-Type: application/json
     "federation_entity": {
       "contacts": ["ops@sunet.se"],
       "federation_fetch_endpoint": "https://sunet.se/openid/fedapi",
+      "entity_statement_signing_alg_values_supported": [
+        "ES256",
+        "ES384"
+      ],
       "homepage_uri": "https://www.sunet.se",
       "organization_name": "SUNET"
     },
@@ -9403,6 +9422,10 @@ Host: op.umu.se
 	  <t>
 	    Endpoint URLs are not form-urlencoded in JSON metadata parameter values.
 	  </t>
+	  <t>
+	    Fixed #65: Defined <spanx style="verb">entity_statement_signing_alg_values_supported</spanx>
+	    Federation Entity metadata parameter.
+	  </t>
 	</list>
       </t>
 

From 0c58e9a048afd121cfb6934ef8de84823c40ca60 Mon Sep 17 00:00:00 2001
From: Michael Jones <michael_b_jones@hotmail.com>
Date: Sat, 21 Sep 2024 14:05:39 -0700
Subject: [PATCH 2/2] Move history entry to -40

---
 openid-federation-1_0.xml | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/openid-federation-1_0.xml b/openid-federation-1_0.xml
index 3103db5..3011148 100644
--- a/openid-federation-1_0.xml
+++ b/openid-federation-1_0.xml
@@ -9844,7 +9844,8 @@ Host: op.umu.se
 	-40
 	<list style="symbols">
 	  <t>
-	    TBD
+	    Fixed #65: Defined <spanx style="verb">entity_statement_signing_alg_values_supported</spanx>
+	    Federation Entity metadata parameter.
 	  </t>
 	</list>
       </t>
@@ -9858,10 +9859,6 @@ Host: op.umu.se
 	  <t>
 	    Endpoint URLs are not form-urlencoded in JSON metadata parameter values.
 	  </t>
-	  <t>
-	    Fixed #65: Defined <spanx style="verb">entity_statement_signing_alg_values_supported</spanx>
-	    Federation Entity metadata parameter.
-	  </t>
 	  <t>
 	    Fixed #52: Clarified that PAR requests must use Request Objects.
 	  </t>