| < draft-ietf-jose-json-web-encryption-38.txt | draft-ietf-jose-json-web-encryption-39.txt > | |||
|---|---|---|---|---|
| JOSE Working Group M. Jones | JOSE Working Group M. Jones | |||
| Internet-Draft Microsoft | Internet-Draft Microsoft | |||
| Intended status: Standards Track J. Hildebrand | Intended status: Standards Track J. Hildebrand | |||
| Expires: June 12, 2015 Cisco | Expires: July 3, 2015 Cisco | |||
| December 9, 2014 | December 30, 2014 | |||
| JSON Web Encryption (JWE) | JSON Web Encryption (JWE) | |||
| draft-ietf-jose-json-web-encryption-38 | draft-ietf-jose-json-web-encryption-39 | |||
| Abstract | Abstract | |||
| JSON Web Encryption (JWE) represents encrypted content using | JSON Web Encryption (JWE) represents encrypted content using | |||
| JavaScript Object Notation (JSON) based data structures. | JavaScript Object Notation (JSON) based data structures. | |||
| Cryptographic algorithms and identifiers for use with this | Cryptographic algorithms and identifiers for use with this | |||
| specification are described in the separate JSON Web Algorithms (JWA) | specification are described in the separate JSON Web Algorithms (JWA) | |||
| specification and IANA registries defined by that specification. | specification and IANA registries defined by that specification. | |||
| Related digital signature and MAC capabilities are described in the | Related digital signature and MAC capabilities are described in the | |||
| separate JSON Web Signature (JWS) specification. | separate JSON Web Signature (JWS) specification. | |||
| skipping to change at page 1, line 37 ¶ | skipping to change at page 1, line 37 ¶ | |||
| Internet-Drafts are working documents of the Internet Engineering | Internet-Drafts are working documents of the Internet Engineering | |||
| Task Force (IETF). Note that other groups may also distribute | Task Force (IETF). Note that other groups may also distribute | |||
| working documents as Internet-Drafts. The list of current Internet- | working documents as Internet-Drafts. The list of current Internet- | |||
| Drafts is at http://datatracker.ietf.org/drafts/current/. | Drafts is at http://datatracker.ietf.org/drafts/current/. | |||
| Internet-Drafts are draft documents valid for a maximum of six months | Internet-Drafts are draft documents valid for a maximum of six months | |||
| and may be updated, replaced, or obsoleted by other documents at any | and may be updated, replaced, or obsoleted by other documents at any | |||
| time. It is inappropriate to use Internet-Drafts as reference | time. It is inappropriate to use Internet-Drafts as reference | |||
| material or to cite them other than as "work in progress." | material or to cite them other than as "work in progress." | |||
| This Internet-Draft will expire on June 12, 2015. | This Internet-Draft will expire on July 3, 2015. | |||
| Copyright Notice | Copyright Notice | |||
| Copyright (c) 2014 IETF Trust and the persons identified as the | Copyright (c) 2014 IETF Trust and the persons identified as the | |||
| document authors. All rights reserved. | document authors. All rights reserved. | |||
| This document is subject to BCP 78 and the IETF Trust's Legal | This document is subject to BCP 78 and the IETF Trust's Legal | |||
| Provisions Relating to IETF Documents | Provisions Relating to IETF Documents | |||
| (http://trustee.ietf.org/license-info) in effect on the date of | (http://trustee.ietf.org/license-info) in effect on the date of | |||
| publication of this document. Please review these documents | publication of this document. Please review these documents | |||
| skipping to change at page 4, line 16 ¶ | skipping to change at page 4, line 16 ¶ | |||
| Appendix B. Example AES_128_CBC_HMAC_SHA_256 Computation . . . . 45 | Appendix B. Example AES_128_CBC_HMAC_SHA_256 Computation . . . . 45 | |||
| B.1. Extract MAC_KEY and ENC_KEY from Key . . . . . . . . . . . 45 | B.1. Extract MAC_KEY and ENC_KEY from Key . . . . . . . . . . . 45 | |||
| B.2. Encrypt Plaintext to Create Ciphertext . . . . . . . . . . 46 | B.2. Encrypt Plaintext to Create Ciphertext . . . . . . . . . . 46 | |||
| B.3. 64 Bit Big Endian Representation of AAD Length . . . . . . 46 | B.3. 64 Bit Big Endian Representation of AAD Length . . . . . . 46 | |||
| B.4. Initialization Vector Value . . . . . . . . . . . . . . . 47 | B.4. Initialization Vector Value . . . . . . . . . . . . . . . 47 | |||
| B.5. Create Input to HMAC Computation . . . . . . . . . . . . . 47 | B.5. Create Input to HMAC Computation . . . . . . . . . . . . . 47 | |||
| B.6. Compute HMAC Value . . . . . . . . . . . . . . . . . . . . 47 | B.6. Compute HMAC Value . . . . . . . . . . . . . . . . . . . . 47 | |||
| B.7. Truncate HMAC Value to Create Authentication Tag . . . . . 47 | B.7. Truncate HMAC Value to Create Authentication Tag . . . . . 47 | |||
| Appendix C. Acknowledgements . . . . . . . . . . . . . . . . . . 47 | Appendix C. Acknowledgements . . . . . . . . . . . . . . . . . . 47 | |||
| Appendix D. Document History . . . . . . . . . . . . . . . . . . 48 | Appendix D. Document History . . . . . . . . . . . . . . . . . . 48 | |||
| Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 59 | Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 60 | |||
| 1. Introduction | 1. Introduction | |||
| JSON Web Encryption (JWE) represents encrypted content using | JSON Web Encryption (JWE) represents encrypted content using | |||
| JavaScript Object Notation (JSON) [RFC7159] based data structures. | JavaScript Object Notation (JSON) [RFC7159] based data structures. | |||
| The JWE cryptographic mechanisms encrypt and provide integrity | The JWE cryptographic mechanisms encrypt and provide integrity | |||
| protection for an arbitrary sequence of octets. | protection for an arbitrary sequence of octets. | |||
| Two closely related serializations for JWEs are defined. The JWE | Two closely related serializations for JWEs are defined. The JWE | |||
| Compact Serialization is a compact, URL-safe representation intended | Compact Serialization is a compact, URL-safe representation intended | |||
| skipping to change at page 48, line 34 ¶ | skipping to change at page 48, line 34 ¶ | |||
| Sakimura, Jim Schaad, Hannes Tschofenig, and Sean Turner. | Sakimura, Jim Schaad, Hannes Tschofenig, and Sean Turner. | |||
| Jim Schaad and Karen O'Donoghue chaired the JOSE working group and | Jim Schaad and Karen O'Donoghue chaired the JOSE working group and | |||
| Sean Turner, Stephen Farrell, and Kathleen Moriarty served as | Sean Turner, Stephen Farrell, and Kathleen Moriarty served as | |||
| Security area directors during the creation of this specification. | Security area directors during the creation of this specification. | |||
| Appendix D. Document History | Appendix D. Document History | |||
| [[ to be removed by the RFC Editor before publication as an RFC ]] | [[ to be removed by the RFC Editor before publication as an RFC ]] | |||
| -39 | ||||
| o No changes were made, other than to the version number and date. | ||||
| -38 | -38 | |||
| o Replaced uses of the phrases "JWS object" and "JWE object" with | o Replaced uses of the phrases "JWS object" and "JWE object" with | |||
| "JWS" and "JWE". | "JWS" and "JWE". | |||
| o Added member names to the JWE JSON Serialization Overview. | o Added member names to the JWE JSON Serialization Overview. | |||
| o Applied other minor editorial improvements. | o Applied other minor editorial improvements. | |||
| -37 | -37 | |||
| End of changes. 5 change blocks. | ||||
| 5 lines changed or deleted | 9 lines changed or added | |||
This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ | ||||