The JSON Object Signing and Encryption (JOSE) -13 drafts are now available, which incorporate issue resolutions agreed to on today’s JOSE working group call. The only breaking change was to the JWS JSON Serialization, by making all header parameters be per-signature (which is actually a simplification and makes it more parallel to the JWS Compact Serialization). Algorithms were added to JWA for key encryption with AES GCM and for password-based encryption. An optional “aad” (Additional Authenticated Data) member was added to the JWE JSON Serialization.
Thanks to Matt Miller for the password-based encryption write-up, which is based on draft-miller-jose-jwe-protected-jwk-02.
The drafts are available at:
- http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-13
- http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-13
- http://tools.ietf.org/html/draft-ietf-jose-json-web-key-13
- http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-13
HTML formatted versions are also available at:
Leave a Reply
You must be logged in to post a comment.