Jump to content

JSON Web Encryption

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by SJK (talk | contribs) at 09:22, 8 June 2018 (news article). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

JSON Web Encryption (JWE) is an IETF standard providing a standardised syntax for the exchange of encrypted data, based on JSON and Base64. It is defined by RFC7516. Along with JSON Web Signature (JWS), it is one of the two possible formats of a JWT (JSON Web Token). In March 2017, a serious flaw was discovered in many popular implementations of JWE.[1]

  1. ^ Rashid, Fahmida (27 March 2017). "Critical flaw alert! Stop using JSON encryption". InfoWorld. Retrieved 8 June 2018.