Persistent Adversarial Security · 5.1 Cross-Domain Identity Binding

Binding an X.509 key to a wallet key

A secp256k1 wallet key signs a certificate’s P-256 key; anyone can verify the binding.