{"id":2119,"date":"2020-08-14T16:53:00","date_gmt":"2020-08-14T23:53:00","guid":{"rendered":"https:\/\/self-issued.info\/?p=2119"},"modified":"2020-08-14T16:53:00","modified_gmt":"2020-08-14T23:53:00","slug":"cose-and-jose-registrations-for-web-authentication-webauthn-algorithms-is-now-rfc-8812","status":"publish","type":"post","link":"https:\/\/self-issued.info\/?p=2119","title":{"rendered":"COSE and JOSE Registrations for Web Authentication (WebAuthn) Algorithms is now RFC 8812"},"content":{"rendered":"<p><span class=\"plain\"><img decoding=\"async\" align=\"right\" src=\"https:\/\/self-issued.info\/images\/ietf-logo.png\" alt=\"IETF logo\"><\/span>The <a href=\"https:\/\/www.w3.org\/Webauthn\/\">W3C Web Authentication (WebAuthn) working group<\/a> and the <a href=\"https:\/\/datatracker.ietf.org\/wg\/cose\/about\/\">IETF COSE working group<\/a> created &#8220;<b>CBOR Object Signing and Encryption (COSE) and JSON Object Signing and Encryption (JOSE) Registrations for Web Authentication (WebAuthn) Algorithms<\/b>&#8221; to make some algorithms and elliptic curves used by WebAuthn and FIDO2 officially part of COSE and JOSE.  The RSA algorithms are used by TPMs.  The &#8220;secp256k1&#8221; curve registered (a.k.a., the Bitcoin curve) is also used in some decentralized identity applications.  The completed specification has now been published as <a href=\"https:\/\/www.rfc-editor.org\/rfc\/rfc8812\">RFC 8812<\/a>.<\/p>\n<p><a href=\"https:\/\/self-issued.info\/?p=2106\">As described when the registrations recently occurred<\/a>, the algorithms registered are:<\/p>\n<ul>\n<li><code>RS256<\/code> &#8212; RSASSA-PKCS1-v1_5 using SHA-256 &#8212; new for COSE<\/li>\n<li><code>RS384<\/code> &#8212; RSASSA-PKCS1-v1_5 using SHA-384 &#8212; new for COSE<\/li>\n<li><code>RS512<\/code> &#8212; RSASSA-PKCS1-v1_5 using SHA-512 &#8212; new for COSE<\/li>\n<li><code>RS1<\/code> &#8212; RSASSA-PKCS1-v1_5 using SHA-1 &#8212; new for COSE<\/li>\n<li><code>ES256K<\/code> &#8212; ECDSA using secp256k1 curve and SHA-256 &#8212; new for COSE and JOSE<\/li>\n<\/ul>\n<p>The elliptic curves registered are:<\/p>\n<ul>\n<li><code>secp256k1<\/code> &#8212; SECG secp256k1 curve &#8212; new for COSE and JOSE<\/li>\n<\/ul>\n<p>See them in the <a href=\"https:\/\/www.iana.org\/assignments\/cose\/cose.xhtml\">IANA COSE Registry<\/a> and the <a href=\"https:\/\/www.iana.org\/assignments\/jose\/jose.xhtml\">IANA JOSE Registry<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The W3C Web Authentication (WebAuthn) working group and the IETF COSE working group created &#8220;CBOR Object Signing and Encryption (COSE) and JSON Object Signing and Encryption (JOSE) Registrations for Web Authentication (WebAuthn) Algorithms&#8221; to make some algorithms and elliptic curves used by WebAuthn and FIDO2 officially part of COSE and JOSE. The RSA algorithms are [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29,28,34,32,27,25,33],"tags":[],"class_list":["post-2119","post","type-post","status-publish","format-standard","hentry","category-cbor","category-cryptography","category-fido","category-ietf","category-json","category-specifications","category-w3c"],"_links":{"self":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/2119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2119"}],"version-history":[{"count":1,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/2119\/revisions"}],"predecessor-version":[{"id":2120,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/2119\/revisions\/2120"}],"wp:attachment":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}