Questions tagged [jose]
JSON Object Signing and Encryption (JOSE) is a generic name for applications that use the JSON Web Signature and JSON Web Encryption (JWS and JWE) standards and derived technology such as JSON Web Token (JWT).
3
questions
3
votes
1answer
163 views
How does the Concat KDF work?
I am writing an application using JSON Web Encryption with ECDH using the X25519 Curve. The RFC says that ECHD-ES derived secret is run through a Concat KDF.
Given ...
2
votes
1answer
120 views
JWE between Android/iPhone and backend
I'm working on a solution where JWE is needed between an Android app and a backend written in Node.JS, using node-jose. I've been struggling a lot since it seems ...
1
vote
0answers
73 views
Why doesn't the JOSE suite/JWA include ECIES?
The JOSE suite specifics use of RSA-OAEP (for when one party has an RSA key) and ECDH (for when two parties have EC keys) in JWA.
Why doesn't it include ECIES? It seems like a way to derive a key ...
