node-jose

node-jose copied to clipboard

When exporting a keystore with true in order to get the private keys, it would be nice to be able to specify a passphrase in order to get a PKCS#12, or something more interesting, like a JWE that uses pbkdf2 to expand a passphrase into a symmetric key. Import would need to be extended to deal with whatever format is chosen.

The current expectation is that the API user calls the "export" methods then uses the result as input to whatever serialization strategy they want to use. The same (in reverse) goes for the "import" methods.

That said, providing some form of helpers to glue things together seems reasonable.