Extra Credit

JSON Web Encryption (RFC 7516)

Official docs outline

9 sections
  1. JWE terminology

    Encrypted content, content encryption key and recipients.

  2. JWE structure

    Header, encrypted key, IV, ciphertext and authentication tag.

  3. JOSE header for JWE

    alg, enc, zip and other header parameters.

  4. Message encryption

    Steps to generate CEK, encrypt key and content.

  5. Message decryption

    Steps to recover content and validate integrity.

  6. JWE Compact Serialization

    Five base64url segments.

  7. JWE JSON Serialization

    Multiple recipients and shared protected headers.

  8. Key management algorithms

    RSA-OAEP, ECDH-ES, AES key wrap and direct keys.

  9. Content encryption algorithms

    AES-GCM and AES-CBC-HMAC content encryption.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

All 21