Mirrors/libwebsockets
1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-16 00:00:07 +01:00
Code Issues Releases Wiki Activity
libwebsockets/lib/jose
History
Andy Green b3131fdfdd cmakelist: Augean Stables refactor 
Establish a new distributed CMake architecture with CMake code related to
a source directory moving to be in the subdir in its own CMakeLists.txt.
In particular, there's now one in ./lib which calls through to ones
further down the directory tree like ./lib/plat/xxx, ./lib/roles/xxx etc.

This cuts the main CMakelists.txt from 98KB -> 33KB, about a 66% reduction,
and it's much easier to maintain sub-CMakeLists.txt that are in the same
directory as the sources they manage, and conceal all the details that that
level.

Child CMakelists.txt become responsible for:

 - include_directories() definition (this is not supported by CMake
   directly, it passes it back up via PARENT_SCOPE vars in helper
   macros)

 - Addition child CMakeLists.txt inclusion, for example toplevel ->
   role -> role subdir

 - Source file addition to the build

 - Dependent library path resolution... this is now a private thing
   in the child CMakeLists.txt, it just passes back any adaptations
   to include_directories() and the LIB_LIST without filling the
   parent namespace with the details
2020-05-27 08:40:12 +01:00
..
jwe lejp: correct return temp type to int 2020-05-11 15:17:14 +01:00
jwk lejp: correct return temp type to int 2020-05-11 15:17:14 +01:00
jws lejp: correct return temp type to int 2020-05-11 15:17:14 +01:00
CMakeLists.txt cmakelist: Augean Stables refactor 2020-05-27 08:40:12 +01:00
private-lib-jose.h private.h: rename to contain dir 2019-08-15 10:49:52 +01:00
README.md jwe 2018-12-27 06:45:32 +08:00

README.md

JOSE support

JOSE is a set of web standards aimed at encapsulating crypto operations flexibly inside JSON objects.

Lws provides lightweight apis to performs operations on JWK, JWS and JWE independent of the tls backend in use. The JSON parsing is handled by the lws lejp stream parser.

Part RFC Function
JWS RFC7515 JSON Web Signatures
JWE RFC7516 JSON Web Encryption
JWK RFC7517 JSON Web Keys
JWA RFC7518 JSON Web Algorithms

JWA is a set of recommendations for which combinations of algorithms are deemed desirable and secure, which implies what must be done for useful implementations of JWS, JWE and JWK.

Supported algorithms

Supported keys

  • All RFC7517 / JWK forms: octet, RSA and EC

  • singleton and keys[] arrays of keys supported

Symmetric ciphers

  • All common AES varaiants: CBC, CFB128, CFB8, CTR, EVB, OFB, KW and XTS

Asymmetric ciphers

  • RSA

  • EC (P-256, P-384 and P-521 JWA curves)

Payload auth and crypt

  • AES_128_CBC_HMAC_SHA_256
  • AES_192_CBC_HMAC_SHA_384
  • AES_256_CBC_HMAC_SHA_512
  • AES_128_GCM

For the required and recommended asymmetric algorithms, support currently looks like this

JWK kty JWA lws
EC Recommended+ yes
RSA Required yes
oct Required yes
JWE alg JWA lws
RSA1_5 Recommended- yes
RSA-OAEP Recommended+ no
ECDH-ES Recommended+ no
JWS alg JWA lws
HS256 Required yes
RS256 Recommended+ yes
ES256 Recommended yes

Minimal Example tools

JWK

JWS

JWE

API tests

See ./minimal-examples/api-tests/api-test-jose/ for example test code. The tests are built and confirmed during CI.