{"id":34142,"date":"2019-02-05T10:46:41","date_gmt":"2019-02-05T15:46:41","guid":{"rendered":"http:\/\/www.opensource.im\/uncategorized\/json-object-signing-and-encryption-jose.php"},"modified":"2019-02-05T10:46:41","modified_gmt":"2019-02-05T15:46:41","slug":"json-object-signing-and-encryption-jose","status":"publish","type":"post","link":"https:\/\/euvolution.com\/open-source-convergence\/encryption\/json-object-signing-and-encryption-jose.php","title":{"rendered":"JSON Object Signing and Encryption (JOSE)"},"content":{"rendered":"<p><p>HS256          HMAC using SHA-256          alg          Required          [IESG]          [RFC7518, Section 3.2]          n\/a                          HS384          HMAC using SHA-384          alg          Optional          [IESG]          [RFC7518, Section 3.2]          n\/a                          HS512          HMAC using SHA-512          alg          Optional          [IESG]          [RFC7518, Section 3.2]          n\/a                          RS256          RSASSA-PKCS1-v1_5 using SHA-256          alg          Recommended          [IESG]          [RFC7518, Section 3.3]          n\/a                          RS384          RSASSA-PKCS1-v1_5 using SHA-384          alg          Optional          [IESG]          [RFC7518, Section 3.3]          n\/a                          RS512          RSASSA-PKCS1-v1_5 using SHA-512          alg          Optional          [IESG]          [RFC7518, Section 3.3]          n\/a                          ES256          ECDSA using P-256 and SHA-256          alg          Recommended+          [IESG]          [RFC7518, Section 3.4]          n\/a                          ES384          ECDSA using P-384 and SHA-384          alg          Optional          [IESG]          [RFC7518, Section 3.4]          n\/a                          ES512          ECDSA using P-521 and SHA-512          alg          Optional          [IESG]          [RFC7518, Section 3.4]          n\/a                          PS256          RSASSA-PSS using SHA-256 and MGF1 with SHA-256          alg          Optional          [IESG]          [RFC7518, Section 3.5]          n\/a                          PS384          RSASSA-PSS using SHA-384 and MGF1 with SHA-384          alg          Optional          [IESG]          [RFC7518, Section 3.5]          n\/a                          PS512          RSASSA-PSS using SHA-512 and MGF1 with SHA-512          alg          Optional          [IESG]          [RFC7518, Section 3.5]          n\/a                          none          No digital signature or MAC performed          alg          Optional          [IESG]          [RFC7518, Section 3.6]          n\/a                          RSA1_5          RSAES-PKCS1-v1_5          alg          Recommended-          [IESG]          [RFC7518, Section 4.2]          n\/a                          RSA-OAEP          RSAES OAEP using default parameters          alg          Recommended+          [IESG]          [RFC7518, Section 4.3]          n\/a                          RSA-OAEP-256          RSAES OAEP using SHA-256 and MGF1 with SHA-256          alg          Optional          [IESG]          [RFC7518, Section 4.3]          n\/a                          A128KW          AES Key Wrap using 128-bit key          alg          Recommended          [IESG]          [RFC7518, Section 4.4]          n\/a                          A192KW          AES Key Wrap using 192-bit key          alg          Optional          [IESG]          [RFC7518, Section 4.4]          n\/a                          A256KW          AES Key Wrap using 256-bit key          alg          Recommended          [IESG]          [RFC7518, Section 4.4]          n\/a                          dir          Direct use of a shared symmetric key          alg          Recommended          [IESG]          [RFC7518, Section 4.5]          n\/a                          ECDH-ES          ECDH-ES using Concat KDF          alg          Recommended+          [IESG]          [RFC7518, Section 4.6]          n\/a                          ECDH-ES+A128KW          ECDH-ES using Concat KDF and \"A128KW\" wrapping          alg          Recommended          [IESG]          [RFC7518, Section 4.6]          n\/a                          ECDH-ES+A192KW          ECDH-ES using Concat KDF and \"A192KW\" wrapping          alg          Optional          [IESG]          [RFC7518, Section 4.6]          n\/a                          ECDH-ES+A256KW          ECDH-ES using Concat KDF and \"A256KW\" wrapping          alg          Recommended          [IESG]          [RFC7518, Section 4.6]          n\/a                          A128GCMKW          Key wrapping with AES GCM using 128-bit key          alg          Optional          [IESG]          [RFC7518, Section 4.7]          n\/a                          A192GCMKW          Key wrapping with AES GCM using 192-bit key          alg          Optional          [IESG]          [RFC7518, Section 4.7]          n\/a                          A256GCMKW          Key wrapping with AES GCM using 256-bit key          alg          Optional          [IESG]          [RFC7518, Section 4.7]          n\/a                          PBES2-HS256+A128KW          PBES2 with HMAC SHA-256 and \"A128KW\" wrapping          alg          Optional          [IESG]          [RFC7518, Section 4.8]          n\/a                          PBES2-HS384+A192KW          PBES2 with HMAC SHA-384 and \"A192KW\" wrapping          alg          Optional          [IESG]          [RFC7518, Section 4.8]          n\/a                          PBES2-HS512+A256KW          PBES2 with HMAC SHA-512 and \"A256KW\" wrapping          alg          Optional          [IESG]          [RFC7518, Section 4.8]          n\/a                          A128CBC-HS256          AES_128_CBC_HMAC_SHA_256 authenticated encryption algorithm          enc          Required          [IESG]          [RFC7518, Section 5.2.3]          n\/a                          A192CBC-HS384          AES_192_CBC_HMAC_SHA_384 authenticated encryption algorithm          enc          Optional          [IESG]          [RFC7518, Section 5.2.4]          n\/a                          A256CBC-HS512          AES_256_CBC_HMAC_SHA_512 authenticated encryption algorithm          enc          Required          [IESG]          [RFC7518, Section 5.2.5]          n\/a                          A128GCM          AES GCM using 128-bit key          enc          Recommended          [IESG]          [RFC7518, Section 5.3]          n\/a                          A192GCM          AES GCM using 192-bit key          enc          Optional          [IESG]          [RFC7518, Section 5.3]          n\/a                          A256GCM          AES GCM using 256-bit key          enc          Recommended          [IESG]          [RFC7518, Section 5.3]          n\/a                          EdDSA          EdDSA signature algorithms          alg          Optional          [IESG]          [RFC8037, Section 3.1]          [RFC8032]                          RS1          RSASSA-PKCS1-v1_5 with SHA-1          JWK          Prohibited          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          [draft-irtf-cfrg-webcrypto-algorithms]                          RSA-OAEP-384          RSA-OAEP using SHA-384 and MGF1 with SHA-384          alg          Optional          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          n\/a                          RSA-OAEP-512          RSA-OAEP using SHA-512 and MGF1 with SHA-512          alg          Optional          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          n\/a                          A128CBC          AES CBC using 128 bit key          JWK          Prohibited          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          [draft-irtf-cfrg-webcrypto-algorithms]                          A192CBC          AES CBC using 192 bit key          JWK          Prohibited          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          [draft-irtf-cfrg-webcrypto-algorithms]                          A256CBC          AES CBC using 256 bit key          JWK          Prohibited          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          [draft-irtf-cfrg-webcrypto-algorithms]                          A128CTR          AES CTR using 128 bit key          JWK          Prohibited          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          [draft-irtf-cfrg-webcrypto-algorithms]                          A192CTR          AES CTR using 192 bit key          JWK          Prohibited          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          [draft-irtf-cfrg-webcrypto-algorithms]                          A256CTR          AES CTR using 256 bit key          JWK          Prohibited          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          [draft-irtf-cfrg-webcrypto-algorithms]                          HS1          HMAC using SHA-1          JWK          Prohibited          [W3C_Web_Cryptography_Working_Group]          [https:\/\/www.w3.org\/TR\/WebCryptoAPI]          [draft-irtf-cfrg-webcrypto-algorithms]<\/p>\n<p><!-- Auto Generated --><\/p>\n<p>Excerpt from:<br \/>\n<a target=\"_blank\" href=\"http:\/\/www.iana.org\/assignments\/jose\/jose.xhtml\" title=\"JSON Object Signing and Encryption (JOSE)\">JSON Object Signing and Encryption (JOSE)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> HS256 HMAC using SHA-256 alg Required [IESG] [RFC7518, Section 3.2] n\/a HS384 HMAC using SHA-384 alg Optional [IESG] [RFC7518, Section 3.2] n\/a HS512 HMAC using SHA-512 alg Optional [IESG] [RFC7518, Section 3.2] n\/a RS256 RSASSA-PKCS1-v1_5 using SHA-256 alg Recommended [IESG] [RFC7518, Section 3.3] n\/a RS384 RSASSA-PKCS1-v1_5 using SHA-384 alg Optional [IESG] [RFC7518, Section 3.3] n\/a RS512 RSASSA-PKCS1-v1_5 using SHA-512 alg Optional [IESG] [RFC7518, Section 3.3] n\/a ES256 ECDSA using P-256 and SHA-256 alg Recommended+ [IESG] [RFC7518, Section 3.4] n\/a ES384 ECDSA using P-384 and SHA-384 alg Optional [IESG] [RFC7518, Section 3.4] n\/a ES512 ECDSA using P-521 and SHA-512 alg Optional [IESG] [RFC7518, Section 3.4] n\/a PS256 RSASSA-PSS using SHA-256 and MGF1 with SHA-256 alg Optional [IESG] [RFC7518, Section 3.5] n\/a PS384 RSASSA-PSS using SHA-384 and MGF1 with SHA-384 alg Optional [IESG] [RFC7518, Section 3.5] n\/a PS512 RSASSA-PSS using SHA-512 and MGF1 with SHA-512 alg Optional [IESG] [RFC7518, Section 3.5] n\/a none No digital signature or MAC performed alg Optional [IESG] [RFC7518, Section 3.6] n\/a RSA1_5 RSAES-PKCS1-v1_5 alg Recommended- [IESG] [RFC7518, Section 4.2] n\/a RSA-OAEP RSAES OAEP using default parameters alg Recommended+ [IESG] [RFC7518, Section 4.3] n\/a RSA-OAEP-256 RSAES OAEP using SHA-256 and MGF1 with SHA-256 alg Optional [IESG] [RFC7518, Section 4.3] n\/a A128KW AES Key Wrap using 128-bit key alg Recommended [IESG] [RFC7518, Section 4.4] n\/a A192KW AES Key Wrap using 192-bit key alg Optional [IESG] [RFC7518, Section 4.4] n\/a A256KW AES Key Wrap using 256-bit key alg Recommended [IESG] [RFC7518, Section 4.4] n\/a dir Direct use of a shared symmetric key alg Recommended [IESG] [RFC7518, Section 4.5] n\/a ECDH-ES ECDH-ES using Concat KDF alg Recommended+ [IESG] [RFC7518, Section 4.6] n\/a ECDH-ES+A128KW ECDH-ES using Concat KDF and \"A128KW\" wrapping alg Recommended [IESG] [RFC7518, Section 4.6] n\/a ECDH-ES+A192KW ECDH-ES using Concat KDF and \"A192KW\" wrapping alg Optional [IESG] [RFC7518, Section 4.6] n\/a ECDH-ES+A256KW ECDH-ES using Concat KDF and \"A256KW\" wrapping alg Recommended [IESG] [RFC7518, Section 4.6] n\/a A128GCMKW Key wrapping with AES GCM using 128-bit key alg Optional [IESG] [RFC7518, Section 4.7] n\/a A192GCMKW Key wrapping with AES GCM using 192-bit key alg Optional [IESG] [RFC7518, Section 4.7] n\/a A256GCMKW Key wrapping with AES GCM using 256-bit key alg Optional [IESG] [RFC7518, Section 4.7] n\/a PBES2-HS256+A128KW PBES2 with HMAC SHA-256 and \"A128KW\" wrapping alg Optional [IESG] [RFC7518, Section 4.8] n\/a PBES2-HS384+A192KW PBES2 with HMAC SHA-384 and \"A192KW\" wrapping alg Optional [IESG] [RFC7518, Section 4.8] n\/a PBES2-HS512+A256KW PBES2 with HMAC SHA-512 and \"A256KW\" wrapping alg Optional [IESG] [RFC7518, Section 4.8] n\/a A128CBC-HS256 AES_128_CBC_HMAC_SHA_256 authenticated encryption algorithm enc Required [IESG] [RFC7518, Section 5.2.3] n\/a A192CBC-HS384 AES_192_CBC_HMAC_SHA_384 authenticated encryption algorithm enc Optional [IESG] [RFC7518, Section 5.2.4] n\/a A256CBC-HS512 AES_256_CBC_HMAC_SHA_512 authenticated encryption algorithm enc Required [IESG] [RFC7518, Section 5.2.5] n\/a A128GCM AES GCM using 128-bit key enc Recommended [IESG] [RFC7518, Section 5.3] n\/a A192GCM AES GCM using 192-bit key enc Optional [IESG] [RFC7518, Section 5.3] n\/a A256GCM AES GCM using 256-bit key enc Recommended [IESG] [RFC7518, Section 5.3] n\/a EdDSA EdDSA signature algorithms alg Optional [IESG] [RFC8037, Section 3.1] [RFC8032] RS1 RSASSA-PKCS1-v1_5 with SHA-1 JWK Prohibited [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] [draft-irtf-cfrg-webcrypto-algorithms] RSA-OAEP-384 RSA-OAEP using SHA-384 and MGF1 with SHA-384 alg Optional [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] n\/a RSA-OAEP-512 RSA-OAEP using SHA-512 and MGF1 with SHA-512 alg Optional [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] n\/a A128CBC AES CBC using 128 bit key JWK Prohibited [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] [draft-irtf-cfrg-webcrypto-algorithms] A192CBC AES CBC using 192 bit key JWK Prohibited [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] [draft-irtf-cfrg-webcrypto-algorithms] A256CBC AES CBC using 256 bit key JWK Prohibited [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] [draft-irtf-cfrg-webcrypto-algorithms] A128CTR AES CTR using 128 bit key JWK Prohibited [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] [draft-irtf-cfrg-webcrypto-algorithms] A192CTR AES CTR using 192 bit key JWK Prohibited [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] [draft-irtf-cfrg-webcrypto-algorithms] A256CTR AES CTR using 256 bit key JWK Prohibited [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] [draft-irtf-cfrg-webcrypto-algorithms] HS1 HMAC using SHA-1 JWK Prohibited [W3C_Web_Cryptography_Working_Group] [https:\/\/www.w3.org\/TR\/WebCryptoAPI] [draft-irtf-cfrg-webcrypto-algorithms] <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45],"tags":[],"class_list":["post-34142","post","type-post","status-publish","format-standard","hentry","category-encryption"],"_links":{"self":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/posts\/34142"}],"collection":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/comments?post=34142"}],"version-history":[{"count":0,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/posts\/34142\/revisions"}],"wp:attachment":[{"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/media?parent=34142"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/categories?post=34142"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/euvolution.com\/open-source-convergence\/wp-json\/wp\/v2\/tags?post=34142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}