RFC 7517 - JSON Web Key (JWK)
发布日期: 2015年5月
状态: 标准跟踪协议 (Standards Track)
作者: M. Jones (Microsoft)
摘要 (Abstract)
JSON Web Key (JWK) 是一种JavaScript Object Notation (JSON) 数据结构，用于表示加密密钥 (Cryptographic Key). 本规范还定义了JWK Set JSON数据结构，用于表示一组JWK. 与本规范一起使用的加密算法和标识符在单独的JSON Web Algorithms (JWA) 规范以及该规范建立的IANA注册表中描述.
目录 (Contents)
- 1. Introduction (简介)
- 1.1 Notational Conventions (符号约定)
- 2. Terminology (术语)
- 3. Example JWK (JWK示例)
- 4. JSON Web Key (JWK) Format (JWK格式)
- 4.1 "kty" (Key Type) Parameter
- 4.2 "use" (Public Key Use) Parameter
- 4.3 "key_ops" (Key Operations) Parameter
- 4.4 "alg" (Algorithm) Parameter
- 4.5 "kid" (Key ID) Parameter
- 4.6 "x5u" (X.509 URL) Parameter
- 4.7 "x5c" (X.509 Certificate Chain) Parameter
- 4.8 "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter
- 4.9 "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter
- 5. JWK Set Format (JWK集合格式)
- 5.1 "keys" Parameter
- 6. String Comparison Rules (字符串比较规则)
- 7. Encrypted JWK and Encrypted JWK Set Formats (加密JWK格式)
- 8. IANA Considerations (IANA注意事项)
- 8.1 JSON Web Key Parameters Registry
- 8.2 JSON Web Key Use Registry
- 8.3 JSON Web Key Operations Registry
- 8.4 JSON Web Key Set Parameters Registry
- 8.5 Media Type Registration
- 9. Security Considerations (安全考虑)
- 9.1 Key Provenance and Trust
- 9.2 Preventing Disclosure of Non-public Key Information
- 9.3 RSA Private Key Representations and Blinding
- 9.4 Key Entropy and Random Values
- 10. References (参考文献)
- 10.1 Normative References
- 10.2 Informative References
附录 (Appendices)
- Appendix A. Example JSON Web Key Sets (JWK集合示例)
- A.1 Example Public Keys
- A.2 Example Private Keys
- A.3 Example Symmetric Keys
- Appendix B. Example Use of "x5c" Parameter (x5c参数使用示例)
- Appendix C. Example Encrypted RSA Private Key (加密RSA私钥示例)
- C.1 Plaintext RSA Private Key
- C.2 JOSE Header
- C.3 Content Encryption Key (CEK)
- C.4 Key Derivation
- C.5 Key Encryption
- C.6 Initialization Vector
- C.7 Additional Authenticated Data
- C.8 Content Encryption
- C.9 Complete Representation
- Acknowledgements (致谢)
- Author's Address (作者地址)
相关资源
- 官方原文: RFC 7517
- 官方页面: RFC 7517 DataTracker
- 勘误表: RFC Editor Errata