[jose] Draft -01 of JSON Crypto Specs: JWS, JWE, JWK, JWA, JWS-JS, JWE-JS

Mike Jones <Michael.Jones@microsoft.com> Tue, 13 March 2012 00:37 UTC

Received-SPF: pass (mail56-tx2: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=Michael.Jones@microsoft.com; helo=TK5EX14HUBC105.redmond.corp.microsoft.com ; icrosoft.com ;
From: Mike Jones <Michael.Jones@microsoft.com>
To: "jose@ietf.org" <jose@ietf.org>
Thread-Topic: Draft -01 of JSON Crypto Specs: JWS, JWE, JWK, JWA, JWS-JS, JWE-JS
Thread-Index: Ac0AsXe8nVQEXhi3RWWAlZ3h4dYRKA==
Date: Tue, 13 Mar 2012 00:37:28 +0000
Message-ID: <4E1F6AAD24975D4BA5B168042967394366416EDD@TK5EX14MBXC284.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B168042967394366416EDDTK5EX14MBXC284r_"
MIME-Version: 1.0
Subject: [jose] Draft -01 of JSON Crypto Specs: JWS, JWE, JWK, JWA, JWS-JS, JWE-JS
Precedence: list

New versions of the JSON Object Signing and Encryption (JOSE)<http://datatracker.ietf.org/wg/jose/> specifications are now available that incorporate working group feedback since publication of the initial versions.  They are:

*         JSON Web Signature (JWS) - Digital signature/HMAC specification

*         JSON Web Encryption (JWE) - Encryption specification

*         JSON Web Key (JWK) - Public key specification

*         JSON Web Algorithms (JWA) - Algorithms and identifiers specification
The most important changes are:

*         Added a separate integrity check for encryption algorithms without an integral integrity check.

*         Defined header parameters for including JWK public keys and X.509 certificate chains directly in the header.
See the Document History section in each specification for a more detailed list of changes.
Corresponding versions of the JSON Serialization specs, which use these JOSE drafts, are also available.  Besides using JSON Serializations of the cryptographic results (rather than Compact Serializations using a series of base64url encoded values), these specifications also enable multiple digital signatures and/or HMACs to applied to the same message and enable the same plaintext to be encrypted to multiple recipients.  They are:

*         JSON Web Signature JSON Serialization (JWS-JS)

*         JSON Web Encryption JSON Serialization (JWE-JS)
These specifications are available at:

*         http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-01

*         http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-01

*         http://tools.ietf.org/html/draft-ietf-jose-json-web-key-01

*         http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-01

*         http://tools.ietf.org/html/draft-jones-json-web-signature-json-serialization-01

*         http://tools.ietf.org/html/draft-jones-json-web-encryption-json-serialization-01
HTML formatted versions are available at:

*         http://self-issued.info/docs/draft-ietf-jose-json-web-signature-01.html

*         http://self-issued.info/docs/draft-ietf-jose-json-web-encryption-01.html

*         http://self-issued.info/docs/draft-ietf-jose-json-web-key-01.html

*         http://self-issued.info/docs/draft-ietf-jose-json-web-algorithms-01.html

*         http://self-issued.info/docs/draft-jones-json-web-signature-json-serialization-01.html

*         http://self-issued.info/docs/draft-jones-json-web-encryption-json-serialization-01.html

                                                                -- Mike

[jose] Draft -01 of JSON Crypto Specs: JWS, JWE, … Mike Jones