If you are interested in a Ruby library for signing and verifying a token containing a simple payload, take a look at our Slosilo library: https://github.com/c

If you are interested in a Ruby library for signing and verifying a token containing a simple payload, take a look at our Slosilo library: https://github.com/conjurinc/slosilo#signing https://github.com/conjurinc/slosilo#signing We use this library to store a signed username. Nothing more than that, just a username in a signed, expiring token. No `alg` field or any other options. The Slosilo code has been subjected to a professional crytographic audit, so it's safe for you to use. Unfortunately, without an NDA, we can't show you the audit report, that's just how these things work. The only audit finding was a recommendation that we switch to `AES-256-GCM`, which we did in Slosilo 2.0, November 2014.