No Way, JOSE!
summary
Explains JOSE as JSON Object Signing and Encryption and shows exact formats: JWS: three parts (base64 header payload signature) and JWE: five parts (header encrypted key IV ciphertext tag) and that the content encryption key is encrypted asymmetrically then used symmetrically for the ciphertext. Surveys hashing HMAC signatures (RSA ES EdDSA) and JWT use for id/access tokens, links working demos and slides at rsa.sumbigo.tech and jose.sumbigo.tech with a 2048-bit default demo.
AI-written summary · about
chapters (13)
- 0:00Introduction to JOSE
- 1:08What is JOSE and why it matters
- 2:29Cryptography basics
- 4:13Hashing algorithms
- 7:24Keyed hashes use cases
- 10:34Digital signatures and non-repudiation
- 16:55Encryption fundamentals
- 21:07Symmetric vs asymmetric encryption
- 28:05JOSE standards
- 31:55JSON Web Encryption deep dive
- 37:36JSON Web Tokens structure
- 38:59Summary
- 42:07Q&A
