3 ms·
What do you think about IETF-JOSE? I've been using it as sort of a cookbook for signing and encryption. They even have a cookbook: http://datatracker.ietf.org/d
by jchrisa 12y ago
What do you think about IETF-JOSE? I've been using it as sort of a cookbook for signing and encryption. They even have a cookbook: http://datatracker.ietf.org/doc/draft-ietf-jose-cookbook/ http://datatracker.ietf.org/doc/draft-ietf-jose-cookbook/
- tptacek 12y agoJOSE includes JSON canonicalization, which scares the crap out of me. If I had the choice, I'd treat JSON as binary --- a whitespace change would, for a signed file, break the signature. JOSE also includes RSA PKCS1v1.5 signatures, which are deprecated (you should use RSA-PSS, which JOSE also documents). It includes naive nondeterministic DSA, which should be deprecated in favor of deterministic DSA or something like Ed25519. It doesn't include details you actually want about curve selection. (Also, P-521?!) It includes encryption under RSA PKCS1v1.5 (encryption with v1.5 is even worse than signing under it) and AES-CBC, which is disfavored by cryptographers. (My understanding of JOSE is cursory, at best, so I wouldn't be surprised to be corrected on any of these).