Currently, we only support creating DID documents with EC keys. The problem with EC keys is that some key backends (Azure Key Vault) don't support EC encryption schemes (ECDH). Decryption is used by the following Nuts node features:
- Receiving private credentials over gRPC network (although we might migrate to server-to-server issuance before this becomes a problem)
- Encrypting data (encrypt_jwt), used by KIK-v to encrypt DIDComm messages
Currently, we only support creating DID documents with EC keys. The problem with EC keys is that some key backends (Azure Key Vault) don't support EC encryption schemes (ECDH). Decryption is used by the following Nuts node features: