[jose] Draft -10 of the JOSE Specifications

Mike Jones <Michael.Jones@microsoft.com> Fri, 26 April 2013 08:25 UTC

Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E02F521F97BB for <jose@ietfa.amsl.com>; Fri, 26 Apr 2013 01:25:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.338
X-Spam-Level:
X-Spam-Status: No, score=-2.338 tagged_above=-999 required=5 tests=[AWL=0.260, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yJLeI3RQ+-o5 for <jose@ietfa.amsl.com>; Fri, 26 Apr 2013 01:25:08 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0204.outbound.protection.outlook.com [207.46.163.204]) by ietfa.amsl.com (Postfix) with ESMTP id 0DABE21F93E1 for <jose@ietf.org>; Fri, 26 Apr 2013 01:25:04 -0700 (PDT)
Received: from BL2FFO11FD022.protection.gbl (10.173.161.203) by BL2FFO11HUB010.protection.gbl (10.173.161.112) with Microsoft SMTP Server (TLS) id 15.0.675.0; Fri, 26 Apr 2013 08:24:57 +0000
Received: from TK5EX14HUBC102.redmond.corp.microsoft.com (131.107.125.37) by BL2FFO11FD022.mail.protection.outlook.com (10.173.161.101) with Microsoft SMTP Server (TLS) id 15.0.675.0 via Frontend Transport; Fri, 26 Apr 2013 08:24:57 +0000
Received: from TK5EX14MBXC283.redmond.corp.microsoft.com ([169.254.2.161]) by TK5EX14HUBC102.redmond.corp.microsoft.com ([157.54.7.154]) with mapi id 14.02.0318.003; Fri, 26 Apr 2013 08:24:47 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "jose@ietf.org" <jose@ietf.org>
Thread-Topic: Draft -10 of the JOSE Specifications
Thread-Index: Ac5CV4GGnwFrDigGRRe4831w/fZ3Tw==
Date: Fri, 26 Apr 2013 08:24:46 +0000
Message-ID: <4E1F6AAD24975D4BA5B1680429673943676D2022@TK5EX14MBXC283.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [157.54.51.34]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B1680429673943676D2022TK5EX14MBXC283r_"
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(189002)(199002)(44976003)(31966008)(79102001)(66066001)(47446002)(76482001)(77982001)(47736001)(74502001)(51856001)(54316002)(56816002)(71186001)(53806001)(49866001)(80022001)(16406001)(55846006)(20776003)(63696002)(50986001)(16236675002)(59766001)(65816001)(74366001)(74662001)(54356001)(512954001)(4396001)(15202345002)(33656001)(6806003)(81542001)(69226001)(46102001)(564824004)(47976001)(81342001)(56776001)(6606295001); DIR:OUT; SFP:; SCL:1; SRVR:BL2FFO11HUB010; H:TK5EX14HUBC102.redmond.corp.microsoft.com; RD:InfoDomainNonexistent; MX:1; A:1; LANG:en;
X-OriginatorOrg: microsoft.onmicrosoft.com
X-Forefront-PRVS: 08286A0BE2
Subject: [jose] Draft -10 of the JOSE Specifications
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Apr 2013 08:25:10 -0000

Based upon working group feedback on the -09 drafts, I've released an update to the JSON Object Signing and Encryption (JOSE) specifications that changes the processing rules for JWEs encrypted to multiple recipients.  The new processing rules enable using AES GCM for multiple-recipient JWE objects.  This update makes no changes to the single-recipient case.

The updated specification versions are:

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-10

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-10

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-key-10

*        http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-10

HTML formatted versions are also available at:

*        http://self-issued.info/docs/draft-ietf-jose-json-web-signature-10.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-encryption-10.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-key-10.html

*        http://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-10.html

                                                            -- Mike

P.S.  Also posted at http://self-issued.info/?p=1012.