6. AKP Thumbprints

AKP thumbprints make AKP keys comparable using the JWK and COSE thumbprint procedures from RFC 7638 and RFC 9679. The thumbprint input uses the required algorithm-related fields, preserving stable lexicographic processing and the public key material.

For JOSE, byte strings are base64url encoded. For COSE, byte strings remain CBOR byte strings. This distinction is important for consistent thumbprints.