Re: [jose] JWK Generator - base64url padding

["Manger, James H" <[e-mail]>]

Richard,

Your base64url encoded fields include “=” padding characters.
We should omit those. Probably need a few extra words in the spec, eg “base64url-encoding (without padding characters)”. The JWE spec mentions omitting the padding in the terminology section.

--
James Manger

From: [e-mail] [mailto:[e-mail]] On Behalf Of Richard Barnes
Sent: Wednesday, 27 March 2013 4:02 AM
To: Justin Richer
Cc: [e-mail]; [e-mail]
Subject: Re: [jose] JWK Generator

We've got some similar tools in PolyCrypt, our WebCrypto polyfill [1].  One of the demos is a self-signed certificate generator, which outputs private key as a pseudo-JWK [2].

I was going to put a code snippet here to demonstrate how to generate an RSA JWK with PolyCrypt.  Instead I just threw up a new demo page that will do it for you [3].  Sample output:
{"n":"a9_H5i8T7Zg65CUYPGRd4R-Lw7UFiH7guIJ5gQgjJUdnlo6edyVSCux_xV43T-Qe2-SGkRbUirZczdCegfAVjAegVMtnrsgOe_EqhN1CFlmPJ8wwC5Ooyc6u1_FBdu4FL3Kl7jWpII-ikOhZm05xUnj_M7CMMJo6w4PvAAzn-is=","e":"AQAB","d":"ETm1sPL5iqoRVVb7DMG2H_mqlsC0NnyUI8Jp5onHGu_RAcCaW0oxVJ85M-n8iRxTNSfDuS1dGR1PqmnStcsBlZnkwc99vl9gtUW2zAs0J-W3YP88Tk3hNM-6vS2So9-LRMashcWruHBPmLudN-UxGzanvS3G58jkK1BLQCW6xVE=","p":"w8ZngvLVkE3reWvra6vDd3KLJqDHIK602h8yl40vLqX0u5UmXojIqL7k9WpmEn5gvVPsp-XDtkV-50ON9NZD8w==","q":"jQ8KzZ3gHPz-yISa0EbRdI_cmeI03Kq1aAj7bSHDcyr4OjnkI4K6lTVNTGUazf10BrJZ5_2Yj5zOfujV803W6Q==","dp":"m4-Mco3YStjPceTh5OVP5RrcHO6GK58Gz4cYoTmrMwrlYyRJn7Zak1NUBPntb2aCIg6MroCwuaWRB9wy8UhMJw==","dq":"CgIpOBGdlzD0OvH9sg10SxryAhEkwwtxt6H7hPDCV2eTGT6GS2a5KmEPzP3Xewois17wNh-uNXJgzGxk0dCSEQ==","qi":"kZ9MFAYRZKPloUprijuKsJxqfsAVJNINFqqrWr5ycqHLtpmhk6l58wkxFpcU94TJPgf1CaJOj2pGRTyijPa3-w=="}

If you want to use PolyCrypt and need EC, let me know, and I can probably get it implemented pretty quickly.

Hope this helps,
--Richard


[1] <http://polycrypt.net>
[2] <http://demo.polycrypt.net/x509/>
[3] <http://demo.polycrypt.net/jwk/>