Questions tagged [jose]

JSON Object Signing and Encryption (JOSE) is a generic name for applications that use the JSON Web Signature and JSON Web Encryption (JWS and JWE) standards and derived technology such as JSON Web Token (JWT).

Filter by
Sorted by
Tagged with
3
votes
1answer
163 views

How does the Concat KDF work?

I am writing an application using JSON Web Encryption with ECDH using the X25519 Curve. The RFC says that ECHD-ES derived secret is run through a Concat KDF. Given ...
2
votes
1answer
120 views

JWE between Android/iPhone and backend

I'm working on a solution where JWE is needed between an Android app and a backend written in Node.JS, using node-jose. I've been struggling a lot since it seems ...
1
vote
0answers
73 views

Why doesn't the JOSE suite/JWA include ECIES?

The JOSE suite specifics use of RSA-OAEP (for when one party has an RSA key) and ECDH (for when two parties have EC keys) in JWA. Why doesn't it include ECIES? It seems like a way to derive a key ...