[jose] proposal: put encryption header parameters into a separate object

Dick Hardt <dick.hardt@gmail.com> Wed, 07 November 2012 20:26 UTC

Return-Path: <dick.hardt@gmail.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 382D721F8BF9 for <jose@ietfa.amsl.com>; Wed, 7 Nov 2012 12:26:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.98
X-Spam-Level:
X-Spam-Status: No, score=-2.98 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, RCVD_IN_SORBS_WEB=0.619]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yYxKEK-2RG3O for <jose@ietfa.amsl.com>; Wed, 7 Nov 2012 12:26:12 -0800 (PST)
Received: from mail-pa0-f44.google.com (mail-pa0-f44.google.com [209.85.220.44]) by ietfa.amsl.com (Postfix) with ESMTP id 0FD5221F8C03 for <jose@ietf.org>; Wed, 7 Nov 2012 12:26:11 -0800 (PST)
Received: by mail-pa0-f44.google.com with SMTP id fb11so1488769pad.31 for <jose@ietf.org>; Wed, 07 Nov 2012 12:26:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to:x-mailer; bh=Vanh3BeZU/Dcxu4TsflWcaXSQ1RIpVhKGk4AE+8E9vU=; b=PTTLYSbfVm8LTPJVStCpat7sYLt5OT+lS5LK/wJO+ixVMV5LzmBmSQi5cboN6dE2UR w4QjnUHExGLZ2WsJTVndy9k/aF5FQ/zYtuceG3hcC5WDtEWzILB021PF2Wr5DIK+E7AK UPRDfj97QEZfDxOUv+ID/i7bdIoiIsNhYGwCo0TAqAgXa+o7UiSzcnpgKzYFu1+cSld7 TzbLc76H7lTgSYC5ph1UxHYhGl4Ns4FNwKgBPkG15sCjkAu96JwUweTIOMlH6ZWelPdp BCEBjKzYgaymKcUnRvX/bHFG+raJ5FK4KPW3V2+aC+eu+xY8aY8mK+/EkLTWVmvOBxTh DYJg==
Received: by 10.68.225.34 with SMTP id rh2mr2314946pbc.78.1352319970894; Wed, 07 Nov 2012 12:26:10 -0800 (PST)
Received: from [192.168.64.235] ([207.239.114.206]) by mx.google.com with ESMTPS id ok3sm14624389pbb.11.2012.11.07.12.25.59 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 07 Nov 2012 12:26:00 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\))
From: Dick Hardt <dick.hardt@gmail.com>
In-Reply-To: <20121107093441.26081.45621.idtracker@ietfa.amsl.com>
Date: Wed, 07 Nov 2012 12:23:50 -0800
Content-Transfer-Encoding: quoted-printable
Message-Id: <19F1B8FA-6655-4933-A58C-70B12BE025C3@gmail.com>
References: <20121107093441.26081.45621.idtracker@ietfa.amsl.com>
To: "jose@ietf.org" <jose@ietf.org>
X-Mailer: Apple Mail (2.1499)
Subject: [jose] proposal: put encryption header parameters into a separate object
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Nov 2012 20:26:14 -0000

To enable encrypting and then signing of the same token, we need to specify the encrypting and signing algorithms separately.

Since we are using JSON, how about if we create an encryption object to contain all the parameters defined in JWE so that there is no overlap in the JWS namespace.

"enc": 
	{  "alg"
	,  "enc"
	,  "zip"
	}