Jump to content

JSON Web Encryption

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by SJK (talk | contribs) at 09:27, 8 June 2018 (Another cite). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

JSON Web Encryption (JWE) is an IETF standard providing a standardised syntax for the exchange of encrypted data, based on JSON and Base64. It is defined by RFC7516. Along with JSON Web Signature (JWS), it is one of the two possible formats of a JWT (JSON Web Token). In March 2017, a serious flaw was discovered in many popular implementations of JWE.[1] JWE forms part of the JavaScript Object Signing and Encryption (JOSE) suite of protocols.[2]

Stub icon

This cryptography-related article is a stub. You can help Wikipedia by expanding it.

  1. ^ Rashid, Fahmida (27 March 2017). "Critical flaw alert! Stop using JSON encryption". InfoWorld. Retrieved 8 June 2018.
  2. ^ Fontana, John (January 21, 2013). "Developers getting JSON-based options for enterprise authentication | ZDNet". ZDNet. Retrieved 2018-06-08.
Retrieved from "https://en.wikipedia.org/w/index.php?title=JSON_Web_Encryption&oldid=844952487"