- From: Alexey Proskuryakov <ap@webkit.org>
- Date: Wed, 06 Nov 2013 15:06:01 -0800
- To: public-webcrypto@w3.org
Netflix Key Wrap proposal says that JWK "enc" maps to encrypt/decrypt WebCrypto usage, and "wrap" maps to wrap/unwrap, while JWK spec says that enc allows all of the four, because wrapping is a kind of encryption. I couldn't find prior discussion of this difference, does either text represent a consensus of opinion? ================================ The following table specifies mapping from WebCrypto KeyUsage values and the JWK use member: WebCrypto KeyUsage to/from JWK use KeyUsage use encrypt enc decrypt enc sign sig verify sig wrap wrap unwrap wrap Note: JWK does not provide the capability to distinguish between an operation and its inverse (or between sign and verify). When mapping from JWK uses to WebCrypto KeyUsages, both WebCrypto KeyUsages associated with the JOSE use are allowed. ================================ ================================ When a key is used to wrap another key and a key use designation for the first key is desired, the "enc" (encryption) key use value SHOULD be used, since key wrapping is a kind of encryption. (The "alg" member can be used to specify the particular kind of encryption to be performed, when desired.) ================================ - WBR, Alexey Proskuryakov
Received on Wednesday, 6 November 2013 23:07:06 UTC