Questions tagged [jwt]

JWT specifies JSON web tokens. It is defined in RFC 7519: JSON Web Token (JWT)

4 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1
vote
0answers
33 views

How many JWT tokens may be securely generated with one secret?

I can remember from my crypto classes, that there is a limit on how many blocks can be securely encrypted with the same key. Before we reach the limit, we should rotate the key. Does it also hold true ...
1
vote
1answer
62 views

What is a “set synchronized CSPRNG”?

I'm looking to implement a performant revocation method for JWTs. I'm reading a paper, in which the following section's second paragraph states: If we use the client hashing approach described ...
0
votes
0answers
38 views

Securely transmit signed token (e.g., JWT) over insecure channel

Apologies if this is already answered somewhere, but I could not find it. I have a setup where a client has a JWT (RSA- or ECDSA-signed), and needs to prove that fact to the peer which issued the ...
0
votes
0answers
37 views

How can JWE support an integrity check given that it uses a public key to encrypt the message?

As far as I know JWE (JSON Web Encryption) supports both integrity and confidentiality. I agree about the confedintiality because only the recepient with a private key can decrypt a message. What ...