New CS proposal: Javascript Object Signing and Encryption (JOSE)

[craigjbass]

What is the proposed Cheat Sheet about?

Javascript Object Signing and Encryption. In particular JWE.

What security issues are commonly encountered related to this area?

• How to configure JWE implementations to be secure.
• Recommended encryption algorithms
• Traps e.g. using the same asymmetric keys between JWT and JWE. In what circumstances is this bad?

What is the objective of the Cheat Sheet?

To help people implement secure JWE implementations.

What other resources exist in this area?

Writing this because there seems to be very little guidance online, and some of it is contradictory.

The owasp cheatsheet has some guidance on best use of JWT (object signing) but no guidance on the usage of JWE.

[szh]

Can you please provide some example topics that you'd like to have added, that aren't already covered in the JWT cheat sheet?

[craigjbass]

• What algorithms are considered best practice? The algorithms for JWT are different to JWE.
• Asymetric vs Symmetric keys
• Clearing up the different between JWT and JWE - signing vs encryption.
• The differences between RSA, RSA-OAEP, AKW, A-GC-MKW, EdDSA, X25519/Curve25119, ECDH-ES+A*KW
• Common use cases of JWE, and recommendations for hardening
  • Sessions
  • Inter-service communication
  • Authentication flows

[szh]

Cool, seems like a good idea. Any input from the other maintainers?

[jmanico]

I think this is a great idea!!

[szh]

Alright then! @craigjbass do you want to take this on?

[mackowski]

@craigjbass do you want to work on this?

[craigjbass]

I think I would be able to write something, but I would need some help!

Some of the topics I want to cover, I'm not sure I know the answer to.