A year in review

SIROS Foundation was founded in February 2025 to contribute to solutions mitigating the number one cybersecurity challenge of our time: the rise of stolen, misused and fake identities.

We believe that FIDO security keys and passkeys are the best approaches to securing digital credentials and the best solution for preserving privacy for an open and trustworthy Internet. In my role as Yubico Board Member and as Chair of SIROS Foundation I am fully focused on this goal for the global identity and authentication ecosystem.

Today, one year after we started, we are proud to share a summary of what we have achieved in collaboration with our partners in global technology, research, government and policy.

Turning code into a scalable hosted platform

At the beginning of last year, SIROS stepped up to spearhead the further development of the wwWallet open source project, the first web based and FIDO / passkey enabled digital identity wallet. In collaboration with Yubico and our partners in research and education, we have built a solid codebase with supporting software.

Based on wwWallet, SIROS is building a scalable platform for wallet-as-a-service: SIROS ID. SIROS ID is more than a wallet. It is a wallet hosting service and an integration platform for all things related to digital credentials. It is 100% open source and exists to ensure the long-term sustainability of the open source ecosystem it is based on.

Driving pilots on three continents

A key factor is global interoperability. SIROS is engaged in pilots in six countries across three continents, driving pilots, improving our solutions and helping the larger ecosystem evolve. 

In the EU large scale pilot consortium Aptitude, SIROS will lead a use case to create interoperability between France and Canada, including payment capability. 

In, WE BUILD, a second EU consortium, SIROS is driving a pilot between the Swedish Companies Registration Office (Bolagsverket) and the Singapore equivalent Accounting and Corporate Regulatory Authority, with support of Singpass and IMDA.  Also through WE BUILD,  we are engaged with business and tax authorities to support their various use cases and help resolve complex questions around  representation rights. Finally, we are working with the Swedish Agency for Digital Governance and Google on how we can supply WE BUILD with pseudonyms.

Other pilots include building a digital press pass for the OCCRP, the world-leading network of investigative journalists.

Advancing open standards and research

During the year SIROS Foundation funded a number of projects designed to advance the state of the art for digital credentials.

SIROS Foundation has developed a fruitful collaboration with the Internet Security Research Group (ISRG).  In the first project ISRG implemented support for draft-ietf-acme-openid-federation in their pebble implementation of the Automatic Certificate Management Environment (ACME) - the protocol used in the world-famous Let's Encrypt service. The plan is to enable other certificate authorities to use ACME to bridge between the OpenID Federation trust ecosystem and “normal” certificates. Countries like Sweden and Italy have expressed strong support for this implementation for their identity wallet infrastructure.

The second and perhaps most exciting of all our research projects is that ISRG and SIROS teams have been working on an implementation of Google’s Longfellow proposal for Zero Knowledge Proofs (ZKP). ZKP is an exciting development that holds the promise of both secure, efficient and privacy preserving credential proofs. The proposal has garnered a lot of interest lately, because it can work with easy-to-deploy methods for hardware-binding. This includes the FIDO raw signing extension introduced in YubiKey 5.8 firmware.

Together with the Swedish Agency for Digital Governance (DIGG) and Google, we are working on a proposal and pilot for how to use longfellow and other ZKP mechanisms as a baseline for pseudonyms which are a very important part of the future of digital credentials.

Also, we have been funding the work Mike Jones and Roland Hedberg have done to help get OpenID Federation version 1.0 over the finish line. We are very happy that the specification is now well on its way to being published by the OpenID Foundation.

Building a strong team

Today, as the core SIROS organization has grown to 15 people and while I continue to contribute as a part time executive chair for SIROS, Leif Johansson is stepping into a full time Executive Director position. Joining from the Swedish University Network organization, Sunet, and with two decades of deep experience and connections in the global internet standards community, Leif has been a critical contributor to the wwWallet development and the SIROS mission. 

This month we are also excited to welcome David Magård as Director of Regulatory and Government Affairs. Having served in several different roles in Swedish government where he  worked at, the intersection of law, policy and digitalisation, David has negotiated the eIDAS II regulation, led two European large scale pilots, and served as an expert or national representative in OECD, European Commission, Open Wallet Forum, ITU, and is one of the most well-known faces of European digital identity.

In 2025, we laid the groundwork. Now we are ready to accelerate our impact for global digital identity in 2026 and beyond!

The blogcrown and photo above was shot last week outside the SIROS office in Stockholm; Leif to the left, David at the top, me at the bottom, and Lisa Nguy, our superb project manager to the left.