paseto

paseto copied to clipboard

[#11] - Bind Keys to Version and Purpose.

1

Adds strong key types for both V1 and V2: - SymmetricKey: Key for LOCAL tokens. - AsymmetricPublicKey: Public key for PUBLIC tokens. - AsymmetricSecretKey: Secret key for PUBLIC tokens. Byte...

atholbro

Bind Keys to Version and Purpose

3

https://github.com/atholbro/paseto/blob/ed9567b4b1c8644ddda495c9e869278ac5ee38e1/paseto-core/src/main/java/net/aholbrook/paseto/PasetoV2.java#L55 https://github.com/atholbro/paseto/blob/ed9567b4b1c8644ddda495c9e869278ac5ee38e1/paseto-core/src/main/java/net/aholbrook/paseto/PasetoV2.java#L113 See https://github.com/paseto-standard/paseto-spec/blob/master/docs/02-Implementation-Guide/03-Algorithm-Lucidity.md Right now, byte arrays are accepted by this API. There's no mechanism to prevent a user from using a v2 public key as a v2 local...

paragonie-security