submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]

6 comments fedilink hide all child comments

I need to

encrypt JSON payload (not just sign)
not share private key
verify the payload is generated with the shared public key and RSA fitting all of these.

As I've only made auth with JWT so far, I'm not sure. If I use RSA, I guess I have to put the encrypted text in the body.

Do you think it can be used? Any other suggestions?

you are viewing a single comment's thread
view the rest of the comments

[-] [email protected] 1 points 1 year ago* (last edited 1 year ago)

TIL that RSA allows maximum 245 character payload. But I guess that doesn't apply to JWE. Thanks for the suggestion, I'm researching 🙏🫡

this post was submitted on 22 Aug 2023

3 points (100.0% liked)

Cryptography

309 readers

13 users here now

Questions, answers, discussions, and literature on the theory and practice of cryptography

founded 1 year ago

MODERATORS