@prefix sec: <https://w3id.org/security#> .
@prefix dc: <http://purl.org/dc/terms/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
@prefix vs: <http://www.w3.org/2003/06/sw-vocab-status/ns#> .
@prefix schema: <http://schema.org/> .
@prefix jsonld: <http://www.w3.org/ns/json-ld#> .

# Ontology definition
sec: a owl:Ontology ;
    dc:title """Security Vocabulary"""@en ;
    dc:description """vocabulary used to ensure the authenticity and integrity of Verifiable Credentials and similar types of constrained digital documents using cryptography, especially through the use of digital signatures and related mathematical proofs
"""^^rdf:HTML ;
    rdfs:seeAlso <https://www.w3.org/TR/vc-data-integrity/> ;
    dc:date "2026-09-01"^^xsd:date ;
.

# Property definitions
sec:verificationMethod a rdf:Property, owl:ObjectProperty ;
    rdfs:range sec:VerificationMethod ;
    rdfs:label "Verification method" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#dfn-verificationmethod>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
    rdfs:seeAlso <https://www.w3.org/TR/did-core/#verification-methods> ;
.

sec:controller a rdf:Property, owl:ObjectProperty ;
    rdfs:domain [ a owl:Class; owl:unionOf (sec:VerificationMethod sec:ControlledIdentifierDocument) ] ;
    rdfs:label "Controller" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#defn-controller>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:proof a rdf:Property, owl:ObjectProperty ;
    rdfs:range sec:ProofGraph ;
    rdfs:label "Proof sets" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#proof-sets>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:domain a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:Proof ;
    rdfs:range xsd:string ;
    rdfs:label "Domain of a proof" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#defn-domain>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:challenge a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:Proof ;
    rdfs:range xsd:string ;
    rdfs:label "Challenge of a proof" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#defn-challenge>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:previousProof a rdf:Property, owl:ObjectProperty ;
    rdfs:domain sec:Proof ;
    rdfs:range sec:Proof ;
    rdfs:label "Previous proof" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#dfn-previousproof>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:proofPurpose a rdf:Property, owl:ObjectProperty ;
    rdfs:domain sec:Proof ;
    rdfs:range sec:VerificationRelationship ;
    rdfs:label "Proof purpose" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#dfn-proofpurpose>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:proofValue a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:Proof ;
    rdfs:range sec:multibase ;
    rdfs:label "Proof value" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#dfn-proofvalue>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:created a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:Proof ;
    rdfs:range xsd:dateTime ;
    rdfs:label "Proof creation time" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#dfn-created>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:expiration a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain [ a owl:Class; owl:unionOf (sec:Proof sec:VerificationMethod) ] ;
    rdfs:range xsd:dateTime ;
    rdfs:label "Expiration time for a proof or verification method" ;
    rdfs:comment """<div>Historically, this property has often been expressed using `expires` as a shortened term in JSON-LD. Since this shortened term and its mapping to this property are in significant use in the ecosystem, the inconsistency between the short term name (`expires`) and the property identifier (`...#expiration`) is expected and should not trigger an error.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#defn-proof-expires>, <https://www.w3.org/TR/cid-1.0/#defn-vm-expires>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:nonce a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:Proof ;
    rdfs:range xsd:string ;
    rdfs:label "Nonce supplied by proof creator" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#dfn-nonce>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:authentication a rdf:Property, owl:ObjectProperty, sec:VerificationRelationship ;
    rdfs:range sec:VerificationMethod ;
    rdfs:label "Authentication method" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#authentication>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:assertionMethod a rdf:Property, owl:ObjectProperty, sec:VerificationRelationship ;
    rdfs:range sec:VerificationMethod ;
    rdfs:label "Assertion method" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#assertion>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:capabilityDelegationMethod a rdf:Property, owl:ObjectProperty, sec:VerificationRelationship ;
    rdfs:range sec:VerificationMethod ;
    rdfs:label "Capability delegation method" ;
    rdfs:comment """<div>Historically, this property has often been expressed using `capabilityDelegation` as a shortened term in JSON-LD. Since this shortened term and its mapping to this property are in significant use in the ecosystem, the inconsistency between the short term name (`capabilityDelegation`) and the property identifier (`...#capabilityDelegationMethod`) is expected and should not trigger an error.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#capability-delegation>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:capabilityInvocationMethod a rdf:Property, owl:ObjectProperty, sec:VerificationRelationship ;
    rdfs:range sec:VerificationMethod ;
    rdfs:label "Capability invocation method" ;
    rdfs:comment """<div>Historically, this property has often been expressed using `capabilityInvocation` as a shortened term in JSON-LD. Since this shortened term and its mapping to this property are in significant use in the ecosystem, the inconsistency between the short term name (`capabilityInvocation`) and the property identifier (`...#capabilityInvocationMethod`) is expected and should not trigger an error.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#capability-invocation>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:keyAgreementMethod a rdf:Property, owl:ObjectProperty, sec:VerificationRelationship ;
    rdfs:range sec:VerificationMethod ;
    rdfs:label "Key agreement protocols" ;
    rdfs:comment """<div>Historically, this property has often been expressed using `keyAgreement` as a shortened term in JSON-LD. Since this shortened term and its mapping to this property are in significant use in the ecosystem, the inconsistency between the short term name (`keyAgreement`) and the property identifier (`...#keyAgreementMethod`) is expected and should not trigger an error.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#key-agreement>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:cryptosuite a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:DataIntegrityProof ;
    rdfs:range sec:cryptosuiteString ;
    rdfs:label "Cryptographic suite" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#dfn-cryptosuite>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:publicKeyMultibase a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:Multikey ;
    rdfs:range sec:multibase ;
    rdfs:label "Public key multibase" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#dfn-publickeymultibase>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
    rdfs:seeAlso <https://datatracker.ietf.org/doc/html/draft-multiformats-multibase-03>, <https://github.com/multiformats/multicodec/blob/master/table.csv> ;
.

sec:secretKeyMultibase a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:Multikey ;
    rdfs:range sec:multibase ;
    rdfs:label "Secret key multibase" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#dfn-secretkeymultibase>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
    rdfs:seeAlso <https://datatracker.ietf.org/doc/html/draft-multiformats-multibase-03>, <https://github.com/multiformats/multicodec/blob/master/table.csv> ;
.

sec:publicKeyJwk a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:JsonWebKey ;
    rdfs:range rdf:JSON ;
    rdfs:label "Public key JWK" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#dfn-publickeyjwk>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
    rdfs:seeAlso <https://www.iana.org/assignments/jose/jose.xhtml>, <https://tools.ietf.org/html/rfc7517> ;
.

sec:secretKeyJwk a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:JsonWebKey ;
    rdfs:range rdf:JSON ;
    rdfs:label "Secret key JWK" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#dfn-secretkeyjwk>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
    rdfs:seeAlso <https://www.iana.org/assignments/jose/jose.xhtml>, <https://tools.ietf.org/html/rfc7517> ;
.

sec:revoked a rdf:Property, owl:DatatypeProperty ;
    rdfs:domain sec:VerificationMethod ;
    rdfs:range xsd:dateTime ;
    rdfs:label "Revocation time" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#dfn-revoked>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:digestMultibase a rdf:Property, owl:DatatypeProperty ;
    rdfs:range sec:multibase ;
    rdfs:label "Digest multibase" ;
    rdfs:comment """<div><b><i>(Feature at Risk)</i></b> The Working Group is currently attempting to determine whether cryptographic hash expression formats can be unified across all of the VCWG core specifications. Candidates for this mechanism include `digestSRI` and `digestMultibase`.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#dfn-digestmultibase>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:allowedAction a rdf:Property ;
    rdfs:label "Allowed action" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/zcap-spec/#delegated-capability>, <https://w3id.org/security#> ;
    vs:term_status "reserved" ;
.

sec:capabilityChain a rdf:Property ;
    rdfs:label "Capability chain" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/zcap-spec/#delegation>, <https://w3id.org/security#> ;
    vs:term_status "reserved" ;
.

sec:capabilityAction a rdf:Property ;
    rdfs:label "Capability action" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/zcap-spec/#invoking-root-capability>, <https://w3id.org/security#> ;
    vs:term_status "reserved" ;
.

sec:caveat a rdf:Property ;
    rdfs:label "Caveat" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/zcap-spec/#caveats>, <https://w3id.org/security#> ;
    vs:term_status "reserved" ;
.

sec:delegator a rdf:Property ;
    rdfs:label "Delegator" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/zcap-spec/#delegation>, <https://w3id.org/security#> ;
    vs:term_status "reserved" ;
.

sec:invocationTarget a rdf:Property ;
    rdfs:label "Invocation target" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/zcap-spec/#root-capability>, <https://w3id.org/security#> ;
    vs:term_status "reserved" ;
.

sec:invoker a rdf:Property ;
    rdfs:label "Invoker" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/zcap-spec/#invocation>, <https://w3id.org/security#> ;
    vs:term_status "reserved" ;
.

sec:blockchainAccountId a rdf:Property, owl:DeprecatedProperty, owl:DatatypeProperty ;
    owl:deprecated true ;
    rdfs:range xsd:string ;
    rdfs:label "Blockchain account ID" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#blockchainAccountId>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:ethereumAddress a rdf:Property, owl:DeprecatedProperty, owl:DatatypeProperty ;
    owl:deprecated true ;
    rdfs:range xsd:string ;
    rdfs:label "Ethereum address" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#ethereumAddress>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
    rdfs:seeAlso <https://eips.ethereum.org/EIPS/eip-55>, <https://ethereum.github.io/yellowpaper/paper.pdf> ;
.

sec:publicKeyBase58 a rdf:Property, owl:DeprecatedProperty, owl:DatatypeProperty ;
    owl:deprecated true ;
    rdfs:range xsd:string ;
    rdfs:label "Base58-encoded Public Key" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#publicKeyBase58>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:publicKeyPem a rdf:Property, owl:DeprecatedProperty, owl:DatatypeProperty ;
    owl:deprecated true ;
    rdfs:range xsd:string ;
    rdfs:label "Public key PEM" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#publicKeyPem>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:publicKeyHex a rdf:Property, owl:DeprecatedProperty, owl:DatatypeProperty ;
    owl:deprecated true ;
    rdfs:range xsd:string ;
    rdfs:label "Hex-encoded version of public Key" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#publicKeyHex>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
    rdfs:seeAlso <https://tools.ietf.org/html/rfc4648#section-8> ;
.

sec:jws a rdf:Property, owl:DeprecatedProperty ;
    owl:deprecated true ;
    rdfs:label "Json Web Signature" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#jws>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
    rdfs:seeAlso <https://tools.ietf.org/html/rfc7797> ;
.

# Class definitions
sec:ControlledIdentifierDocument a rdfs:Class ;
    rdfs:label "Controlled Identifier Document" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#controlled-identifier-documents>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:Proof a rdfs:Class ;
    rdfs:label "Digital proof" ;
    rdfs:comment """<div>This class represents a digital proof on serialized data.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#dfn-data-integrity-proof>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:ProofGraph a rdfs:Class ;
    rdfs:label "An RDF Graph for a digital proof" ;
    rdfs:comment """<div>Instances of this class are <a href="https://www.w3.org/TR/rdf11-concepts/#section-rdf-graph">RDF Graphs</a> [[RDF11-CONCEPTS]], where each of these graphs must include exactly one <a href="#Proof">Proof</a> instance.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:VerificationMethod a rdfs:Class ;
    rdfs:label "Verification method" ;
    rdfs:comment """<div>Instances of this class must be <a href="https://www.w3.org/TR/rdf11-concepts/#resources-and-statements">denoted by URLs</a>, i.e., they cannot be blank nodes.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#verification-methods>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:VerificationRelationship a rdfs:Class ;
    rdfs:subClassOf rdf:Property ;
    rdfs:label "Verification relationship" ;
    rdfs:comment """<div>Instances of this class are verification relationships like, for example, <a href="#authentication">authentication</a> or <a href="#assertionMethod">assertionMethod</a>. These resources can also appear as values of the <a href="#proofPurpose">proofPurpose</a> property.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#verification-relationships>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:DataIntegrityProof a rdfs:Class ;
    rdfs:subClassOf sec:Proof ;
    rdfs:label "A Data Integrity Proof" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#dataintegrityproof>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:Multikey a rdfs:Class ;
    rdfs:subClassOf sec:VerificationMethod ;
    rdfs:label "Multikey Verification Method" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#multikey>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
    rdfs:seeAlso <https://www.w3.org/TR/vc-di-eddsa/#multikey>, <https://www.w3.org/TR/vc-di-ecdsa/#multikey>, <https://www.w3.org/TR/vc-di-bbs/#multikey> ;
.

sec:JsonWebKey a rdfs:Class ;
    rdfs:subClassOf sec:VerificationMethod ;
    rdfs:label "JSON Web Key Verification Method" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#jsonwebkey>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:Ed25519VerificationKey2020 a rdfs:Class ;
    rdfs:subClassOf sec:VerificationMethod ;
    rdfs:label "ED2559 Verification Key, 2020 version" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-di-eddsa/#ed25519verificationkey2020>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:Ed25519Signature2020 a rdfs:Class ;
    rdfs:subClassOf sec:Proof ;
    rdfs:label "Ed25519 Signature Suite, 2020 version" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-di-eddsa/#ed25519signature2020>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:ProcessingError a rdfs:Class ;
    rdfs:label "Processing error" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#processing-errors>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:Key a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "Cryptographic key" ;
    rdfs:comment """<div>This class represents a cryptographic key that may be used for encryption, decryption, or digitally signing data. This class serves as a supertype for specific key types.</div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:EcdsaSecp256k1Signature2019 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "ecdsa-sep256k1, 2019 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/ld-cryptosuite-registry/#ecdsa-secp256k1>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:EcdsaSecp256k1Signature2020 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "ecdsa-sep256k1, 2020 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/ld-cryptosuite-registry/#ecdsa-secp256k1>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:EcdsaSecp256k1VerificationKey2019 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:subClassOf sec:Key ;
    rdfs:label "ecdsa-secp256k1 verification key, 2019 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/ld-cryptosuite-registry/#ecdsasecp256k1recoverysignature2020>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:EcdsaSecp256k1RecoverySignature2020 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "ecdsa-secp256k1 recovery signature, 2020 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/ld-cryptosuite-registry/#ecdsasecp256k1recoverysignature2020>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:EcdsaSecp256k1RecoveryMethod2020 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "ecdsa-secp256k1 recovery method, 2020 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/ld-cryptosuite-registry/#ecdsasecp256k1recoverymethod2020>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:MerkleProof2019 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "Merkle Proof" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/lds-merkle-proof-2019/>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:X25519KeyAgreementKey2019 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "X25519 Key Agreement Key, 2019 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#X25519KeyAgreementKey2019>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:Ed25519VerificationKey2018 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "ED2559 Verification Key, 2018 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/ld-cryptosuite-registry/#ed25519>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:JsonWebKey2020 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "JSON Web Key, 2020 version" ;
    rdfs:comment """<div>A linked data proof suite verification method type used with <a href="#JsonWebSignature2020">`JsonWebSignature2020`</a></div>"""^^rdf:HTML ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#JsonWebKey2020>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:JsonWebSignature2020 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "JSON Web Signature, 2020 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#JsonWebSignature2020>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:BbsBlsSignature2020 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "BBS Signature, 2020 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#BbsBlsSignature2020>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:BbsBlsSignatureProof2020 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "BBS Signature Proof, 2020 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#BbsBlsSignatureProof2020>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:Bls12381G1Key2020 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "BLS 12381 G1 Signature Key, 2020 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#Bls12381G1Key2020>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.

sec:Bls12381G2Key2020 a rdfs:Class, owl:DeprecatedClass ;
    owl:deprecated true ;
    rdfs:label "BLS 12381 G2 Signature Key, 2020 version" ;
    rdfs:isDefinedBy <https://w3c-ccg.github.io/security-vocab/#Bls12381G2Key2020>, <https://w3id.org/security#> ;
    vs:term_status "deprecated" ;
.



# Definitions of individuals
sec:PROOF_GENERATION_ERROR a sec:ProcessingError ;
    rdfs:label "Proof generation error" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#PROOF_GENERATION_ERROR>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:PROOF_VERIFICATION_ERROR a sec:ProcessingError ;
    rdfs:label "Malformed proof" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#PROOF_VERIFICATION_ERROR>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:PROOF_TRANSFORMATION_ERROR a sec:ProcessingError ;
    rdfs:label "Mismatched proof purpose" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#PROOF_TRANSFORMATION_ERROR>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:INVALID_DOMAIN_ERROR a sec:ProcessingError ;
    rdfs:label "Invalid proof domain" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#INVALID_DOMAIN_ERROR>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:INVALID_CHALLENGE_ERROR a sec:ProcessingError ;
    rdfs:label "Invalid challenge" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#INVALID_CHALLENGE_ERROR>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:INVALID_VERIFICATION_METHOD_URL a sec:ProcessingError ;
    rdfs:label "Invalid verification method URL" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#INVALID_VERIFICATION_METHOD_URL>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:INVALID_CONTROLLED_IDENTIFIER_DOCUMENT_ID a sec:ProcessingError ;
    rdfs:label "Invalid controlled identifier document id" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#INVALID_CONTROLLED_IDENTIFIER_DOCUMENT_ID>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:INVALID_CONTROLLED_IDENTIFIER_DOCUMENT a sec:ProcessingError ;
    rdfs:label "Invalid controlled identifier document" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#INVALID_CONTROLLED_IDENTIFIER_DOCUMENT>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:INVALID_VERIFICATION_METHOD a sec:ProcessingError ;
    rdfs:label "Invalid verification method" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#INVALID_VERIFICATION_METHOD>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:INVALID_RELATIONSHIP_FOR_VERIFICATION_METHOD a sec:ProcessingError ;
    rdfs:label "Invalid relationship for verification method" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#INVALID_RELATIONSHIP_FOR_VERIFICATION_METHOD>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

# Definitions of datatypes
sec:cryptosuiteString a rdfs:Datatype ;
    rdfs:subClassOf xsd:string ;
    rdfs:label "Datatype for cryptosuite Identifiers" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/vc-data-integrity/#cryptosuiteString>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

sec:multibase a rdfs:Datatype ;
    rdfs:subClassOf xsd:string ;
    rdfs:label "Datatype for multibase values" ;
    rdfs:isDefinedBy <https://www.w3.org/TR/cid-1.0/#multibase>, <https://w3id.org/security#> ;
    vs:term_status "stable" ;
.

# Context files and their mentions
<https://w3id.org/security/data-integrity/v2> a jsonld:Context ;
    schema:mentions
        sec:assertionMethod,
        sec:authentication,
        sec:capabilityDelegationMethod,
        sec:capabilityInvocationMethod,
        sec:challenge,
        sec:created,
        sec:cryptosuite,
        sec:cryptosuiteString,
        sec:domain,
        sec:expiration,
        sec:keyAgreementMethod,
        sec:nonce,
        sec:previousProof,
        sec:proof,
        sec:proofPurpose,
        sec:proofValue,
        sec:verificationMethod ;
.

<https://w3id.org/security/multikey/v1> a jsonld:Context ;
    schema:mentions
        sec:Multikey,
        sec:controller,
        sec:multibase,
        sec:publicKeyMultibase,
        sec:revoked,
        sec:secretKeyMultibase ;
.

<https://www.w3.org/ns/cid/v1> a jsonld:Context ;
    schema:mentions
        sec:JsonWebKey,
        sec:Multikey,
        sec:assertionMethod,
        sec:authentication,
        sec:capabilityDelegationMethod,
        sec:capabilityInvocationMethod,
        sec:controller,
        sec:expiration,
        sec:keyAgreementMethod,
        sec:publicKeyJwk,
        sec:publicKeyMultibase,
        sec:revoked,
        sec:secretKeyJwk,
        sec:secretKeyMultibase,
        sec:verificationMethod ;
.

<https://w3id.org/security/jwk/v1> a jsonld:Context ;
    schema:mentions
        sec:JsonWebKey,
        sec:controller,
        sec:publicKeyJwk,
        sec:revoked,
        sec:secretKeyJwk ;
.

<https://www.w3.org/ns/credentials/v2> a jsonld:Context ;
    schema:mentions
        sec:assertionMethod,
        sec:authentication,
        sec:capabilityDelegationMethod,
        sec:capabilityInvocationMethod,
        sec:challenge,
        sec:cryptosuite,
        sec:digestMultibase,
        sec:domain,
        sec:expiration,
        sec:keyAgreementMethod,
        sec:nonce,
        sec:previousProof,
        sec:proof,
        sec:proofPurpose,
        sec:proofValue,
        sec:verificationMethod ;
.

<https://www.w3.org/ns/did/v1> a jsonld:Context ;
    schema:mentions
        sec:assertionMethod,
        sec:authentication,
        sec:capabilityDelegationMethod,
        sec:capabilityInvocationMethod,
        sec:controller,
        sec:keyAgreementMethod ;
.