Difference between MdocCborIssuer private key and wallet devicekeyinfo

[oligatorr]

Hello

In the example code of the Readme (Usage/Issue an MDOC CBOR) one can see:

mdoci = MdocCborIssuer(
    private_key=PKEY
)

mdoc = mdoci.new(
    doctype="eu.europa.ec.eudiw.pid.1",
    data=PID_DATA,
    devicekeyinfo=PKEY  # TODO
)

According to this example, the private key utilised to sign the attestation in CBOR is the same as the devicekeyinfo. However devicekeyinfo in my understanding is a secret concealed in the wallet that is used to ensure that the attestations stored in the wallet are cryptographically linked to the wallet. (Furthermore I think this is the private key linked to the Wallet Instance Attestation).

Is this example meaningful ? Shouldn't MdocCborIssuer private_key attribute and devicekeyinfo be two different private keys

• one owned by the issuer and
• the other concealed in the wallet in which attestations will be issued ?

Thank you in advance for your answers/comments

Olivier