// JWE-CURRENT // header = base64({"alg":"A128KW","enc":"A128GCM","kid":"42"}) { "recipients": { { "header": "eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwia2lkIjoiNDIifQo", "encrypted_key": "w_6lbR8WRO0-pxm3MyEXmg" } } "initialization_vector": "vKjNIAhMfYW3zq-TikHfXQ", "ciphertext": "PTRhlo61rZ9bcVFLGK6sIi21r9-Zez03", "authentication_tag": "Zurj775FrQgnI-EPZmbUCg" } // JWE-PROPOSED // protected = base64({"enc":"A128GCM"}) { "header": { "typ": "JWE" }, "protected": "eyJlbmMiOiJBMTI4R0NNIn0K", "recipients": [ { "header": { "alg": "A128KW", "kid": "42" }, "encrypted_key": "w_6lbR8WRO0-pxm3MyEXmg" } ] "initialization_vector": "vKjNIAhMfYW3zq-TikHfXQ", "ciphertext": "PTRhlo61rZ9bcVFLGK6sIi21r9-Zez03", "authentication_tag": "Zurj775FrQgnI-EPZmbUCg" } // JWE-PROPOSED-SUPER-SIMPLE // Single recipient, no protected parameters { "header": { "typ": "JWE", "alg": "A128KW", "enc": "A128GCM", "kid": "42" }, "initialization_vector": "vKjNIAhMfYW3zq-TikHfXQ", "ciphertext": "PTRhlo61rZ9bcVFLGK6sIi21r9-Zez03", "authentication_tag": "Zurj775FrQgnI-EPZmbUCg" } // JWS-CURRENT // header = base64({"alg":"RS256","kid": "42"}) { "payload": "4_0ZISMX1I8xmdPTeBi6eg", "signatures": { "header": "eyJhbGciOiJSUzI1NiIsImtpZCI6ICI0MiJ9Cg", "signature": "3Hu6Av79mEzu6...NcF16ls8gJDe2OmSY" } } // JWS // protected = base64({"alg":"RS256"}) { "payload": "4_0ZISMX1I8xmdPTeBi6eg", "signatures": [ { "header": { "kid": "42" }, "protected": "eyJhbGciOiJSUzI1NiJ9Cg", "signature": "3Hu6Av79mEzu6...NcF16ls8gJDe2OmSY" } ] }