IETF Logo Mail Archive

Re: [jose] JWK 'use' property

Sergey Beryozkin <sberyozkin@gmail.com> Thu, 11 September 2014 11:22 UTC

Return-Path: <sberyozkin@gmail.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEDD31A06FC for <jose@ietfa.amsl.com>; Thu, 11 Sep 2014 04:22:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EOUU_GbseOyU for <jose@ietfa.amsl.com>; Thu, 11 Sep 2014 04:22:51 -0700 (PDT)
Received: from mail-we0-x22f.google.com (mail-we0-x22f.google.com [IPv6:2a00:1450:400c:c03::22f]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F0221A06EB for <jose@ietf.org>; Thu, 11 Sep 2014 04:22:51 -0700 (PDT)
Received: by mail-we0-f175.google.com with SMTP id w61so5012138wes.6 for <jose@ietf.org>; Thu, 11 Sep 2014 04:22:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=IcM9JzB67EknE/q0CJ9yoQeEUI7MjCOWOKhSFx/c46E=; b=neNjD/2NW3VNr1s9mZ/EAjUmqD186QVhFZQcqrGW+VXXR7a+OA8vjSxCu8FfgAthF0 tkdMnlgyKFl0VOnieVU83RkgGiaBPyPOt5yaALeRZSRmZxOGdLnA1j4b/cG/KkmXiCDZ h3DSxzDl4HrZQ2lwOLOm2AzHBPBr4Bt4XPhIJTvZ88uOA87NThiuQ36Di69Jj63dAUei jqk0eq6ZTmPibISZnUMIBVEew+WnV0Z2lnGDr7M08ru/7hdTeHhTSvZr7z9Pxrj0L78R rYsW1Mhg7ep+uomPULF75mqhsn0IwPjeEt4KJFT/lHHGgiisNN4C9OLJKpXhI3smtD57 LOtQ==
X-Received: by 10.194.11.10 with SMTP id m10mr257015wjb.77.1410434570096; Thu, 11 Sep 2014 04:22:50 -0700 (PDT)
Received: from [192.168.2.7] ([109.255.231.6]) by mx.google.com with ESMTPSA id hf9sm1213203wib.11.2014.09.11.04.22.48 for <jose@ietf.org> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 11 Sep 2014 04:22:49 -0700 (PDT)
Message-ID: <54118608.6010804@gmail.com>
Date: Thu, 11 Sep 2014 12:22:48 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.0
MIME-Version: 1.0
To: jose@ietf.org
References: <COL401-EAS1838D8ED8A7323D3422439EDFD80@phx.gbl> <4E1F6AAD24975D4BA5B16804296739439AE76076@TK5EX14MBXC294.redmond.corp.microsoft.com> <541037F8.6070408@gmail.com> <5411856E.5050306@gmail.com>
In-Reply-To: <5411856E.5050306@gmail.com>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/jose/fVdnXAWHJ52tINkChXgBJ6dET-0
Subject: Re: [jose] JWK 'use' property
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose/>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Sep 2014 11:22:53 -0000

On 11/09/14 12:20, Sergey Beryozkin wrote:
> Hi All,
>
> I'm a bit confused about the purpose of the JWK 'use' property [1].
> Specifically, it is not clear to me what does it mean to have a 'public
> signing key' identified with a 'use'='sign'.
>
> AFAIK a public key would be typically used to 'verify' a signature.
> When a 'use'='sign' is set, does it mean it is actually 'verify' which
> is implied.
>
> [2] also mentions that 'use' and 'key_ops' should be used together which
> implies to me both properties are kind of conflicting. So why to have
> 'use' if 'key_ops' can be sufficient ?
>
> Note I'm just trying to generate some noise :-), I'm curious how either

Well, looks like I'm actually doing it :-), sorry, I meant, "I'm *not* 
just trying to generate"


> of these properties can be used to optimize the storing of keys in JWK
> sets...
>
> Thanks, Sergey
>
>
>
> [1] https://tools.ietf.org/html/draft-ietf-jose-json-web-key-31#section-4.2
> [2] https://tools.ietf.org/html/draft-ietf-jose-json-web-key-31#section-4.3

v2.23.0 | Report a Bug | By Email