JSON Web Encryption (RFC 7516)
Official docs outline
9 sections- JWE terminology
Encrypted content, content encryption key and recipients.
- JWE structure
Header, encrypted key, IV, ciphertext and authentication tag.
- JOSE header for JWE
alg, enc, zip and other header parameters.
- Message encryption
Steps to generate CEK, encrypt key and content.
- Message decryption
Steps to recover content and validate integrity.
- JWE Compact Serialization
Five base64url segments.
- JWE JSON Serialization
Multiple recipients and shared protected headers.
- Key management algorithms
RSA-OAEP, ECDH-ES, AES key wrap and direct keys.
- Content encryption algorithms
AES-GCM and AES-CBC-HMAC content encryption.
Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.
More in Auth and identity
All 21- DPoP (RFC 9449)
- FIDO2 CTAP 2.1
- JSON Web Key and Algorithms (RFC 7517 and 7518)
- JSON Web Signature (RFC 7515)
- JSON Web Token (RFC 7519)
- Kerberos V5 (RFC 4120)
- LDAP (RFC 4510 series)
- OAuth 2.0 (RFC 6749)
- OAuth 2.0 Bearer Token Usage (RFC 6750)
- OAuth 2.0 Device Authorization Grant (RFC 8628)
- OAuth 2.0 Security Best Current Practice (RFC 9700)
- OAuth 2.0 Token Exchange (RFC 8693)